NVD disclosure day
CVE-2025-45953
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the PHPGurukul Hostel Management System allows for session hijacking, potentially enabling remote attackers to take over user accounts by exploiting improper session data handling. This could grant unauthorized access to sensitive information within the system.
CVE-2025-45949
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A session hijacking vulnerability exists in the password change component of a user registration and login system. Attackers can exploit this remotely to take over user accounts, leading to unauthorized access and control.
CVE-2025-45947
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An issue in the phpgurukul Online Banquet Booking System allows for arbitrary code execution via the change password component. This vulnerability is reachable over the network, and successful exploitation could impact system confidentiality, integrity, and availability. Confirming if this system is deployed is crucial