CVE ID : CVE-2025-3972

Published : April 27, 2025, 2:15 p.m. | 49 minutes ago

Description : A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Week in review: MITRE ATT&CK v17.0 released, PoC for Erlang/OTP SSH bug is public

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos:
Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs
MITRE has released the latest version of its A …
Read more

Published Date:
Apr 27, 2025 (4 hours, 17 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-34028

CVE-2025-32433

CVE-2025-27610

CVE ID : CVE-2024-52887

Published : April 27, 2025, 8:15 a.m. | 3 hours, 52 minutes ago

Description : Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.

Severity: 3.5 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2024-52888

Published : April 27, 2025, 8:15 a.m. | 3 hours, 52 minutes ago

Description : For an authenticated end-user the portal may run a script while attempting to display a directory or some file’s properties.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-3963

Published : April 27, 2025, 8:15 a.m. | 3 hours, 52 minutes ago

Description : A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-3964

Published : April 27, 2025, 9:15 a.m. | 2 hours, 52 minutes ago

Description : A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE ID : CVE-2025-3965

Published : April 27, 2025, 10:15 a.m. | 1 hour, 52 minutes ago

Description : A vulnerability has been found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /article/app/post. The manipulation of the argument content leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 3.5 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…