Aggregator

Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited

Help Net Security
7 months ago

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Patch Tuesday: Microsoft fixes 5 actively exploited zero-days On May 2025 Patch Tuesday, Microsoft has released security fixes for 70+ vulnerabilities, among them five actively exploited zero-days and two publicly disclosed (but not exploited) vulnerabilities. How to give better cybersecurity presentations (without sounding like a robot) Most people think great presenters are born with natural talent. Luka Krejci, a presentation … More →

The post Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited appeared first on Help Net Security.

Help Net Security

CVE-2025-4934 | PHPGurukul User Registration & Login and User Management System /edit-profile.php sql injection

VulDB Recent Entries
7 months ago
A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Contact leads to sql injection. This vulnerability was named CVE-2025-4934. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-4933 | ponaravindb Hospital-Management-System 1.0 /doctor-panel.php ID sql injection

VulDB Recent Entries
7 months ago
A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-panel.php. The manipulation of the argument ID leads to sql injection. This vulnerability is uniquely identified as CVE-2025-4933. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-4932 | projectworlds Online Lawyer Management System 1.0 /lawyer_registation.php email sql injection

VulDB Recent Entries
7 months ago
A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Affected by this issue is some unknown functionality of the file /lawyer_registation.php. The manipulation of the argument email leads to sql injection. This vulnerability is handled as CVE-2025-4932. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-4931 | projectworlds Online Lawyer Management System 1.0 /user_registation.php email sql injection

VulDB Recent Entries
7 months ago
A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /user_registation.php. The manipulation of the argument email leads to sql injection. This vulnerability is known as CVE-2025-4931. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad