CVE-2025-2380: High SQL Injection in PHPGurukul Apartment Visitors Admin
CVE-2025-2380 is a high SQL injection in PHPGurukul Apartment Visitors 1.0 via mobilenumber. No fix is listed, so restrict access and review logs.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-2380 is a high SQL injection in PHPGurukul Apartment Visitors 1.0 via mobilenumber. No fix is listed, so restrict access and review logs.
CVE-2025-2379 is a high SQL injection in PHPGurukul Apartment Visitors 1.0 via visname. No fix is listed, so restrict access and review logs.
CVE-2025-2372 is a high SQL injection in PHPGurukul HMPV Testing System 1.0 via the password recovery page. No fix is listed, so restrict access.
CVE-2025-2370 is a high stack buffer overflow in TOTOLINK EX1800T up to 9.1.0cu.2112. No fix is listed, so restrict admin access and check the vendor.
CVE-2025-2369 is a high stack buffer overflow in TOTOLINK EX1800T up to 9.1.0cu.2112. No fix is listed, so restrict admin access and check the vendor.
CVE-2025-2363 is a medium path traversal in lenve VBlog up to 1.0.0. No fix is listed and the vendor did not respond, so patch the upload code yourself.
CVE-2025-2362 is a high SQL injection in PHPGurukul Pre-School Enrollment 1.0 via mobnum. No fix is listed, so restrict access and review logs.
CVE-2025-2360 is a high improper authorization flaw in the unsupported D-Link DIR-823G. No patch is expected, so replace it and disable remote management.
CVE-2025-2359 is an improper authorization flaw in the D-Link DIR-823G SetDDNSSettings function. The device is no longer supported, so replace it.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.