Announcements

CVE-2025-10624 (matched: php)

  • 27th September 2026
A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument emailid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.Source: NVD (National Vulnerability ...
Continue reading

CVE-2025-10604 (matched: php)

  • 27th September 2026
A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.Source: NVD (National Vulnerability Database) — ...
Continue reading

CVE-2024-13342 (matched: wordpress)

  • 27th September 2026
The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions up to, and including, 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files with double extensions on the affected site's server which may ...
Continue reading

Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability

  • 27th September 2026

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-71362

Continue reading