CVE-2025-48136 – Estatik Mortgage Calculator PHP Remote File Inclusion Vulnerability

May 16, 2025

CVE ID : CVE-2025-48136

Published : May 16, 2025, 4:15 p.m. | 47 minutes ago

Description : Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) vulnerability in Estatik Mortgage Calculator Estatik allows PHP Local File Inclusion. This issue affects Mortgage Calculator Estatik: from n/a through 2.0.12.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-48137 – Proxymis Interview SQL Injection

Next Article CVE-2025-48135 – Aptivada for WP Cross-Site Scripting

Highlights

CVE-2025-37812 – Linux Kernel USB cdns3 NCM Gadget Deadlock

May 8, 2025

CVE ID : CVE-2025-37812

Published : May 8, 2025, 7:15 a.m. | 58 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

usb: cdns3: Fix deadlock when using NCM gadget

The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit
58f2fcb3a845 (“usb: cdnsp: Fix deadlock issue during using NCM gadget”).

Under PREEMPT_RT the deadlock can be readily triggered by heavy network
traffic, for example using “iperf –bidir” over NCM ethernet link.

The deadlock occurs because the threaded interrupt handler gets
preempted by a softirq, but both are protected by the same spinlock.
Prevent deadlock by disabling softirq during threaded irq handler.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Microsoft adds Copilot-powered debugging features for .NET in Visual Studio

Blackstone portfolio company R Systems Acquires Novigo Solutions, Strengthening its Product Engineering and Full-Stack Agentic-AI Capabilities

HoundDog.ai Launches Industry’s First Privacy-by-Design Code Scanner for AI Applications

The Double-Edged Sustainability Sword Of AI In Web Design

How VPNs are helping people evade increased censorship – and much more

Google’s AI Mode can now find restaurant reservations for you – how it works

Best early Labor Day TV deals 2025: Save up to 50% on Samsung, LG, and more

Claude wins high praise from a Supreme Court justice – is AI’s legal losing streak over?

Preserving Data Integrity with Laravel Soft Deletes for Recovery and Compliance

Preserving Data Integrity with Laravel Soft Deletes for Recovery and Compliance

Quickly Generate Forms based on your Eloquent Models with Laravel Formello

Pest 4 is Released

FOSS Weekly #25.34: Mint 22.2 Features, FreeVPN Fiasco, Windows Update Killing SSDs, AI in LibreOffice and More

FOSS Weekly #25.34: Mint 22.2 Features, FreeVPN Fiasco, Windows Update Killing SSDs, AI in LibreOffice and More

You’ll need standalone Word, PowerPoint, Excel on iOS, as Microsoft 365 app becomes a Copilot wrapper

Microsoft to Move Copilot Previews to iOS While Editing Returns to Office Apps

CVE-2025-48136 – Estatik Mortgage Calculator PHP Remote File Inclusion Vulnerability

Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

Over 1,200 SAP NetWeaver servers vulnerable to actively exploited flaw

Max severity Cisco ISE bug allows pre-auth command execution, patch now

Google sprinkles Chrome and Android with new assistive tricks – here’s what’s new

Is AI just hype? This report claims bots like Microsoft Copilot aren’t replacing humans, increasing wages, or even saving time

CVE-2025-37812 – Linux Kernel USB cdns3 NCM Gadget Deadlock

SAP NetWeaver Visual Composer Flaw Under Active Exploitation

CVE-2024-42190 – HCL Traveler for Microsoft Outlook DLL Hijacking Vulnerability

Sam Altman Says ChatGPT Became a Therapist for Many — And GPT-5 Broke That Bond

CVE-2025-48136 – Estatik Mortgage Calculator PHP Remote File Inclusion Vulnerability

Related Posts