CVE-2025-70063 | PHPGurukul Hospital Management System 4.0 viewid resource injection
A vulnerability classified as problematic has been found in PHPGurukul Hospital Management System 4.0. Affected is an unknown function. Performing
Read More
Vulns
03-03
CVE-2025-69287 | bsv-blockchain ts-sdk 1.x improper following of specification by caller (GHSA-vjpq-xx5g-qvmm)
A vulnerability classified as problematic was found in bsv-blockchain ts-sdk 1.x. Affected by this vulnerability is an unknown functionality. Executing
Read More
CVE-2025-70064 | PHPGurukul Hospital Management System 4.0 Administrator Dashboard /admin/ improper authentication
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0. Affected by this issue
Read More
CVE-2026-22860 | Rack up to 2.2.21/3.1.19/3.2.4 Rack::Directory path traversal (GHSA-mxw3-3hh2-x2mh)
A vulnerability, which was classified as critical, was found in Rack up to 2.2.21/3.1.19/3.2.4. This affects the function Rack::Directory. The
Read More
CVE-2026-25500 | Rack up to 2.2.21/3.1.19/3.2.4 Rack::Directory cross site scripting
A vulnerability has been found in Rack up to 2.2.21/3.1.19/3.2.4 and classified as problematic. This vulnerability affects the function Rack::Directory.
Read More
CVE-2025-70062 | PHPGurukul Hospital Management System 4.0 Add Doctor add-doctor.php cross-site request forgery
A vulnerability was found in PHPGurukul Hospital Management System 4.0 and classified as problematic. This issue affects some unknown processing
Read More
CVE-2026-1994 | s2Member Plugin on WordPress Remote Code Execution
A vulnerability was found in s2Member Plugin on WordPress. It has been classified as critical. Impacted is an unknown function.
Read More
CVE-2026-2709 | busy up to 2.5.5 Callback app.js state redirect (Issue 2287)
A vulnerability was found in busy up to 2.5.5. It has been declared as problematic. The affected element is an
Read More
CVE-2026-2711 | zhutoutoutousan worldquant-miner up to 1.0.9 URL ssrf_proxy.py make_request server-side request forgery (Issue 100)
A vulnerability was found in zhutoutoutousan worldquant-miner up to 1.0.9. It has been rated as critical. The impacted element is
Read More
CVE-2025-15041 | BackWPup Plugin up to 5.6.2 on WordPress save_site_option privilege escalation
A vulnerability was found in BackWPup Plugin up to 5.6.2 on WordPress. It has been classified as critical. This issue
Read More