April 2025 Patch Tuesday: One Zero-Day and 11 Critical Vulnerabilities Among 121 CVEs

April 2025 Patch Tuesday: One Zero-Day and 11 Critical Vulnerabilities Among 121 CVEs

Microsoft has addressed 121 vulnerabilities in its April 2025 security update release. This month’s patches include fixes for one actively exploited zero-day vulnerability and 11 Critical vulnerabilit …
Read more

Published Date:
Apr 25, 2025 (1 day, 16 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-29824

CVE-2025-29791

CVE-2025-27752

CVE-2025-27749

CVE-2025-27748

CVE-2025-27745

CVE-2025-27738

CVE-2025-27491

CVE-2025-27482

CVE-2025-27480

CVE-2025-26686

CVE-2025-26670

CVE-2025-26663

CVE-2025-26647

CVE-2025-21197

Read More

CVE-2025-3970 – Baseweb JSite Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-3970

Published : April 27, 2025, 1:15 p.m. | 1 hour, 49 minutes ago

Description : A vulnerability classified as problematic has been found in baseweb JSite up to 1.0. Affected is an unknown function of the file /sys/office/save. The manipulation of the argument Remarks leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 3.5 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-3971 – PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability

CVE ID : CVE-2025-3971

Published : April 27, 2025, 2:15 p.m. | 49 minutes ago

Description : A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-3972 – PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability

CVE ID : CVE-2025-3972

Published : April 27, 2025, 2:15 p.m. | 49 minutes ago

Description : A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More