CVE-2025-9769 D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub478D28 of the file /mngplatform.asp. The manipulation of the argument addr with the input echo 12345 poc.txt results in command injection. An attack on the physical device is feasible. The exploit has...

CVE-2022-38694

CVE-2022-38694 describes a vulnerability in the BootRom where an unchecked write address could enable local escalation of privilege without extra execution privileges. Connected sources indicate the issue affects Unisoc chipsets and has been discussed across multiple advisories (NVD, Red Hat, CVE...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2025-54857

creationtimestamp| type| source ---|---|--- 2025-09-01 06:02:00+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxqwhzos7c2p 2025-09-01 09:36:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrci7n4zs27 2025-09-01 09:41:43+00:00| seen|...

CVE-2025-9186

creationtimestamp| type| source ---|---|--- 2025-09-01 05:36:46+00:00| seen| https://bsky.app/profile/witch.catra.top/post/3lxqv2uy3es2h 2025-09-02 02:14:47+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lxt2aorgym2c...

SourceCodester Hotel Reservation System 安全漏洞

SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A security vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which is caused by SQL injection due to incorrect manipulation of the parameter address in file...

Linux Distros Unpatched Vulnerability : CVE-2022-24695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. ...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from the failure of the parameter ip6addr of the function...

Linux Distros Unpatched Vulnerability : CVE-2025-9183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2. CVE-2025-9183 Note that Nessus relies on the...

AVX-Based Timing Side Channel — ASLR Detection

This work demonstrates a technique for detecting ASLR using AVX memory load instructions combined with RDTSCP timing and SIGSEGV detection. It illustrates how side-channel timing measurements can be applied to analyze memory layout randomization...

PT-2025-35479

Name of the Vulnerable Software and Affected Versions: Akınsoft QR Menü versions s1.05.05 through s1.05.11 Description: This issue is an open redirect vulnerability that allows for forceful browsing and phishing attacks. Recommendations: Update Akınsoft QR Menü to version s1.05.12 or later...

PT-2025-35504

Name of the Vulnerable Software and Affected Versions: SourceCodester Hotel Reservation System version 1.0 Description: A security flaw has been discovered that allows for remote SQL injection via manipulation of the address argument in the file /admin/updateabout.php. The exploit has been releas...

SUSE CVE-2025-38677

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x1c1/0x2a0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline...

CVE-2025-52054

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...

CVE-2025-50974

The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...

CVE-2025-9414

A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote...

CVE-2025-9438

A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected is an unknown function of the file /admin/addstudent.php. The manipulation of the argument address results in cross site scripting. The attack can be executed remotely. The...

CVE-2025-31971

AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery SSRF attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information...

CVE-2009-20008

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can...