Feed/CVE-2025-2646
CVE-2025-2646HIGHCVSS 7.3

CVE-2025-2646

Published Mar 23, 2025·Updated Jun 17, 2026

NVD Description

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Public Exploits & PoCs7 found

[POC] CVE-2025-26466 — CVE-2025-26466

OpenSSH server 9.5p1 - 9.9p1 DoS (PoC)

1

[POC] CVE-2025-26466 — CVE-2025-26466

poc for CVE-2025-26466

[POC] CVE-2025-26466 — CVE-2025-26466-msf

CVE-2025-26466 .rb module for msfconsole

[POC] GHSA-3whf-vgf2-9w6g — cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2_MSG_PING DoS PoC

[POC] CVE-2025-26466 — CVE-2025-26466

The OpenSSH client and server are vulnerable to a pre-authentication DoS attack between versions 9.5p1 to 9.9p1 (inclusive) that causes memory and CPU consumption

[POC] CVE-2025-26465 — CVE-2025-26465

MitM attack allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to it

[POC] CVE-2025-26465 — patch-manual-CVE-2025-26465-e-CVE-2025-26466

Patch Manual para a correção das CVE-2025-26465-e-CVE-2025-26466, para sistemas sem update do OpenSSH

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free