CVE-2025-9749

A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

• CWE-74
• CWE-89
• CWE-89

• https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819Exploit, Third Party Advisory
• https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819#steps-to-reproduceExploit, Third Party Advisory
• https://vuldb.com/?ctiid.322050Permissions Required, VDB Entry
• https://vuldb.com/?id.322050Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.640488Third Party Advisory, VDB Entry
• https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819Exploit, Third Party Advisory
• https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819#steps-to-reproduceExploit, Third Party Advisory

Published

Aug 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9743A security flaw has been discovered in code-projects Human R…9.8
• CVE-2025-9744A weakness has been identified in Campcodes Online Loan Mana…9.8
• CVE-2025-9745A security vulnerability has been detected in D-Link DI-500W…7.2
• CVE-2025-9746A vulnerability was detected in Campcodes Hospital Managemen…4.8
• CVE-2025-9747A vulnerability has been found in Koillection up to 1.6.18. …8.8
• CVE-2025-9748A vulnerability was determined in Tenda CH22 1.0.0.1. Affect…9.8
• CVE-2025-9750A security flaw has been discovered in Campcodes Online Lear…9.8
• CVE-2025-9751A weakness has been identified in Campcodes Online Learning …9.8
• CVE-2025-9752A security vulnerability has been detected in D-Link DIR-852…9.8
• CVE-2025-9753A vulnerability was detected in Campcodes Online Hospital Ma…4.8
• CVE-2025-9754A flaw has been found in Campcodes Online Hospital Managemen…5.4
• CVE-2025-9755A vulnerability has been found in Khanakag-17 Library Manage…6.1