CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: goreleaser, terraform-provider-sendgrid, gitea, gitness, dockerize, fluent-bit-plugin-loki, nats-top, kubernetes-csi-external-health-monitor, policy-controller, kserve, wal-g, envoy-gateway, flux-notification-controller, kubeflow-katib, crossplane-provider-azure-sql,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: goreleaser, prometheus-adapter, gitea, dockerize, fluent-bit-plugin-loki, nats-top, kubernetes-csi-external-health-monitor, policy-controller, kserve, undock, envoy-gateway, thanos, flux-notification-controller, kubeflow-katib, crossplane-provider-azure-sql,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: goreleaser, prometheus-adapter, gitea, dockerize, fluent-bit-plugin-loki, nats-top, kubernetes-csi-external-health-monitor, policy-controller, kserve, undock, envoy-gateway, thanos, flux-notification-controller, kubeflow-katib, crossplane-provider-azure-sql,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: goreleaser, terraform-provider-sendgrid, gitea, gitness, dockerize, fluent-bit-plugin-loki, nats-top, kubernetes-csi-external-health-monitor, policy-controller, kserve, wal-g, envoy-gateway, flux-notification-controller, kubeflow-katib, crossplane-provider-azure-sql,...

Vulnerabilities fixed in Arista EOS

Arista has fixed vulnerabilities in the Arista EOS platform. The vulnerabilities are related to the processing of malformed messages, which can lead to system crashes and denial-of-service conditions. High-privileged attackers can exploit these vulnerabilities, leading to severe operational...

Web-Based Internet Laboratory Management System /subject/controller.php File SQL Injection Vulnerability

Web-Based Internet Laboratory Management System is a web laboratory software. A SQL injection vulnerability exists in Web-Based Internet Laboratory Management System, which originates from a lack of validation of externally-entered SQL statements in the file /subject/controller.php. An attacker c...

Web-Based Internet Laboratory Management System controller.php File SQL Injection Vulnerability

Web-Based Internet Laboratory Management System is a web laboratory software. The Web-Based Internet Laboratory Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the file /course/controller.php. An attacker...

Web-Based Internet Laboratory Management System /enrollment/controller.php File SQL Injection Vulnerability

Web-Based Internet Laboratory Management System is a web laboratory software. A SQL injection vulnerability exists in Web-Based Internet Laboratory Management System, which originates from a lack of validation of externally entered SQL statements in the file /enrollment/controller.php. An attacke...

Web-Based Internet Laboratory Management System /user/controller.php File SQL Injection Vulnerability

Web-Based Internet Laboratory Management System is a web laboratory software. A SQL injection vulnerability exists in Web-Based Internet Laboratory Management System, which originates from a lack of validation of externally entered SQL statements in the file /user/controller.php. An attacker can...

Web-Based Internet Laboratory Management System /settings/controller.php File SQL Injection Vulnerability

Web-Based Internet Laboratory Management System is a web laboratory software. A SQL injection vulnerability exists in Web-Based Internet Laboratory Management System, which originates from a lack of validation of externally entered SQL statements in the file /settings/controller.php. An attacker...

Bluetooth: When HCI work queue is drained, only queue chained work

...

CVE-2025-8727

There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web server, an attacker can use a specially crafted payload to trigger the Stack buffer overflow vulnerability...

CVE-2025-7623

Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system...

CVE-2025-63695

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php...

CVE-2025-13300

A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-13301

A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /subject/controller.php. The manipulation results in sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-13299

A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulation can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2025-13298

A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now publ...

CVE-2025-13297

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, jitsucom-bulker, splunk-otel-collector, grafana-alloy, sqlexporter, amazon-cloudwatch-agent, bento, cluster-api-aws-controller, argo-events...