CVE-2025-50492 – PHPGurukul e-Diary Management System Session Hijacking Vulnerability

July 28, 2025

CVE ID : CVE-2025-50492

Published : July 28, 2025, 6:15 p.m. | 6 hours, 22 minutes ago

Description : Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-54298 – Joomla CommentBox Stored Cross-Site Scripting Vulnerability

Next Article CVE-2025-50491 – PHPGurukul Bank Locker Management System Session Hijacking Vulnerability

Highlights

CVE-2025-4820 – Cloudflare Quiche TCP Congestion Window Manipulation Vulnerability

June 18, 2025

CVE ID : CVE-2025-4820

Published : June 18, 2025, 4:15 p.m. | 45 minutes ago

Description : Impact

Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually support.

An unauthenticated remote attacker can exploit the vulnerability by first completing a handshake and initiating a congestion-controlled data transfer towards itself. Then, it could manipulate the victim’s congestion control state by sending ACK frames exercising an opportunistic ACK attack; see RFC 9000 Section 21.4. The victim could grow the congestion window beyond typical expectations and allow more bytes in flight than the path might really support.

Patches

quiche 0.24.4 is the earliest version containing the fix for this issue.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 15 Enterprise Use Cases That Justify Hiring Node.js Developers in 2025

The Core Model: Start FROM The Answer, Not WITH The Solution

AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode Research Reveals

Understanding the code modernization conundrum

Not just YouTube: Google is using AI to guess your age based on your activity – everywhere

Malicious extensions can use ChatGPT to steal your personal data – here’s how

What Zuckerberg’s ‘personal superintelligence’ sales pitch leaves out

This handy NordVPN tool flags scam calls on Android – even before you answer

Route Optimization through Laravel’s Shallow Resource Architecture

Route Optimization through Laravel’s Shallow Resource Architecture

This Week in Laravel: Laracon News, Free Laravel Idea, and Claude Code Course

Everything We Know About Pest 4

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

Windows 11’s MSN Widgets board now opens in default browser, such as Chrome (EU only)

Microsoft’s new “move to Windows 11” campaign implies buying OneDrive paid plan

CVE-2025-50492 – PHPGurukul e-Diary Management System Session Hijacking Vulnerability

The hidden risks of browser extensions – and how to stay safe

Minnesota National Guard Deployed After Major Cyberattack on St. Paul City Systems

Opossum Attack: New Vulnerability Compromises Encrypted TLS Connections, Allowing MitM & Data Injection

The A24 Elden Ring movie is real and has a director, but I have no idea how it’s going to work

CVE-2025-6669 – Gooaclok819 SublinkX Cryptographic Key Hard-Coding Remote Vulnerability

CVE-2025-27937 – Quick Agent Path Traversal Vulnerability

CVE-2025-4820 – Cloudflare Quiche TCP Congestion Window Manipulation Vulnerability

AMD’s Ryzen 7 7800X3D is down to the lowest price of the year at Amazon — Memorial Day savings drop it to $385

CVE-2025-49849 – Apache PRJ File Out-of-bounds Read Vulnerability

Marshall’s first soundbar rocks as a mainstream alternative – Here’s my take

CVE-2025-50492 – PHPGurukul e-Diary Management System Session Hijacking Vulnerability

Related Posts