PHPGurukul Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System is an internet cafe management system. A cross-site scripting vulnerability exists in Cyber Cafe Management System that stems from the uadd parameter of the add-users.php endpoint not being sufficiently cleaned up or coded for user input, and for which no detailed...

PHPGurukul Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System is an internet cafe management system. A cross-site scripting vulnerability exists in Cyber Cafe Management System that stems from the username parameter of the add-users.php endpoint not adequately handling the input, no details of the vulnerability are available at...

CVE-2025-70891

CVE-2025-70891 is a stored XSS vulnerability in Phpgurukul Cyber Cafe Management System v1.0, affecting the add-users.php endpoint’s uadd parameter. The issue arises from insufficient sanitization/encoding of user input, allowing an authenticated attacker to persistently store arbitrary JavaScrip...

EUVD-2026-2691

A stored cross-site scripting XSS vulnerability exists in Cyber Cafe Management System v1.0. An authenticated attacker can inject arbitrary JavaScript code into the username parameter via the add-users.php endpoint. The injected payload is stored and executed in the victim s browser when the...

PT-2026-3140

Name of the Vulnerable Software and Affected Versions Altium 365 affected versions not specified Description A stored cross-site scripting XSS issue exists in the user profile text fields. Insufficient server-side input sanitization allows authenticated users to inject arbitrary HTML and JavaScri...

PT-2026-3154

Name of the Vulnerable Software and Affected Versions Macro Expert version 4.7 Description The software contains an unquoted service path vulnerability. This allows local users to potentially execute arbitrary code with elevated system privileges. An attacker can exploit the improperly configured...

PT-2026-3037

MilleGPG5 5.7.2 contains a local privilege escalation vulnerability that allows authenticated users to modify service executable files in the MariaDB bin directory. Attackers can replace the mysqld.exe with a malicious executable, which will execute with system privileges when the computer restar...

CVE-2025-70892

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint...

CVE-2025-70892

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003260 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002774 advisory. sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002942 advisory. Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002855 advisory. The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001999 advisory. The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002250)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002250 advisory. The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002469 advisory. arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002223 advisory. arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002078 advisory. The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, whi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001896 advisory. The dgramrecvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structu...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003258 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service integer overflow and memory corruption or possibly have...