CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2025-6398

CVE-2025-6398 affects ASUS AI Suite 3 via the IOMap64.sys driver, where a null pointer dereference can be triggered by specially crafted input, potentially causing a system crash (BSOD). The issue is local with high privileges required and user interaction not required; impact is primarily availa...

CVE-2025-6398

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...

CVE-2019-19145

Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65536 possible passwords...

CVE-2019-19145

Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65536 possible passwords...

Quantum SuperLoader 3 安全漏洞

Quantum SuperLoader 3 is an automated storage and retrieval device from Quantum USA. A security vulnerability exists in Quantum SuperLoader 3 version V94.0 005E.0h, which stems from a hard-coded account issue that could lead to unauthorized access...

CVE-2013-10033

An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the dbrestore.php endpoint. The flaw allows attackers to inject arbitrary SQL queries into the dates POST parameter, enabling file write via INTO OUTFILE under specific environmental conditions. This can lead to...

curl: Stack use-after-scope in HTTP/3 POST request processing via CURLOPT_POSTFIELDS

Summary A stack use-after-scope vulnerability exists in libcurl's HTTP/3 request processing when using CURLOPTPOSTFIELDS with stack-allocated buffers. libcurl retains a pointer to user-provided POST data but accesses it after the original stack frame has been destroyed, leading to memory corrupti...

CVE-2025-6348

The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2025-6348

CVE-2025-6348 affects WordPress Smart Slider 3 plugin. All versions up to and including 3.5.1.28 are vulnerable to a time-based SQL Injection via the sliderid parameter, caused by insufficient escaping of user input and inadequate preparation of the existing SQL query. This allows authenticated a...

CVE-2025-6348 Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter

The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

PT-2025-31379 · WordPress · Smart Slider 3

Name of the Vulnerable Software and Affected Versions: Smart Slider 3 versions prior to 3.5.1.29 Description: The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the sliderid parameter. Insufficient escaping of user-supplied parameters and inadequate preparation ...

WordPress Smart Slider 3 plugin <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter vulnerability

Authenticated Administrator+ SQL Injection via sliderid Parameter vulnerability discovered by Chive in WordPress Plugin Smart Slider 3 versions = 3.5.1.28...

AZL-66035 CVE-2024-58266 affecting package rust for versions less than 1.86.0-3

The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the and \xa0 characters, which may facilitate command injection...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...

[SECURITY] Fedora 41 Update: mingw-binutils-2.42-3.fc41

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

CVE-2025-38399

CVE-2025-38399 describes a NULL pointer dereference in the Linux kernel SCSI target code. Specifically, core_scsi3_decode_spec_i_port() may call core_scsi3_lunacl_undepend_item() with dest_se_deve, which could be NULL in an error path, potentially leading to a kernel crash. The fix implemented ad...

CVE-2025-38399 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in corescsi3decodespeciport The function corescsi3decodespeciport, in its error code path, unconditionally calls corescsi3lunaclundependitem passing the destsedeve pointer, which may be...

PT-2025-30553 · Mailman 3 · Mailman 3

Name of the Vulnerable Software and Affected Versions: mailman3 versions prior to 3.3.10-2.1 Description: A reliance on untrusted inputs in a security decision within the logrotate configuration allows for potential escalation from mailman to root. Recommendations: Update mailman3 to version...

AZL-65643 CVE-2025-4878 affecting package libssh for versions less than 0.10.6-3

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...