CVE-2025-32370: High File Upload Flaw in Kentico Xperience
CVE-2025-32370 is a high severity upload flaw in Kentico Xperience before 13.0.178. Install the latest hotfix and review what the content uploader accepts.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-32370 is a high severity upload flaw in Kentico Xperience before 13.0.178. Install the latest hotfix and review what the content uploader accepts.
CVE-2025-3235 is a medium SQL injection in PHPGurukul Old Age Home System 1.0. No fixed version is listed, so limit access and use prepared statements.
CVE-2025-3231 is a high SQL injection in PHPGurukul Zoo Management 2.1. No fixed version is listed, so limit access and use prepared statements.
CVE-2025-3220 is a high SQL injection in PHPGurukul e-Diary 1.0. The record lists no fix, so limit access and use prepared statements in the code.
CVE-2025-3217 is a high SQL injection in PHPGurukul e-Diary 1.0. The record lists no fix, so limit access and use prepared statements in the code.
CVE-2025-3216 is a high SQL injection in PHPGurukul e-Diary 1.0. The record lists no fix, so limit access and use prepared statements in the code.
CVE-2025-3213 is a high SQL injection in PHPGurukul e-Diary 1.0. The record lists no fix, so limit access and use prepared statements in the code.
CVE-2025-3209 is a medium SQL injection in code-projects Patient Records System 1.0. No fix is listed, so limit access and use prepared statements.
CVE-2025-3204 is a medium SQL injection in CodeAstro Car Rental System 1.0. No fixed version is listed, so limit access and use prepared statements.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.