CVE-2025-10967

A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9. This affects an unknown part of the file /chkuser.php. Performing manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-89

• https://github.com/Miker132/CVE-/issues/3
• https://vuldb.com/?ctiid.325834
• https://vuldb.com/?id.325834
• https://vuldb.com/?submit.653138
• https://github.com/Miker132/CVE-/issues/3

Published

Sep 25, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10961A vulnerability was determined in Wavlink NU516U1 M16U1_V240…8
• CVE-2025-10962A vulnerability was identified in Wavlink NU516U1 M16U1_V240…8.8
• CVE-2025-10963A security flaw has been discovered in Wavlink NU516U1 M16U1…8.8
• CVE-2025-10964A weakness has been identified in Wavlink NU516U1. Affected …8.8
• CVE-2025-10965A security vulnerability has been detected in LazyAGI LazyLL…6.3
• CVE-2025-10966curl's code for managing SSH connections when SFTP was done …4.3
• CVE-2025-10968Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2025-10969Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2025-1097A security issue was discovered in ingress-nginx https://gi…8.8
• CVE-2025-10970Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2025-10971Insecure Storage of Sensitive Information vulnerability in M…8.8
• CVE-2025-10973A flaw has been found in JackieDYH Resume-management-system …7.3