CVE-2025-2379

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /create-pass.php. The manipulation of the argument visname leads to sql injection. The attack can be initiated remotely. The...

xorg: xwayland: Out-of-bounds write in CreatePointerBarrierClient()

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...

PT-2025-11500

Name of the Vulnerable Software and Affected Versions PHPGurukul Apartment Visitors Management System version 1.0 Description A critical issue has been identified in the code of the /create-pass.php file. The manipulation of the visname argument leads to SQL injection. This issue can be exploited...

siw_create_listen InfiniBand Buffer Overflow DoS

Vulnerability of the siwcreatelisten function in the drivers/infiniband/sw/siw/siwcm.c module – The Linux kernel’s InfiniBand support driver is vulnerable due to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

GHSA-3WGM-2GW2-VH5M Kubernetes GitRepo Volume Inadvertent Local Repository Access

A security vulnerability was discovered in Kubernetes that could allow a user with create pod permission to exploit gitRepo volumes to access local git repositories belonging to other pods on the same node. This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone...

PT-2025-16711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A leak in the spufs create context function has been fixed. The issue was missed in previous leak fixes from 2008 and occurs when trying to set affinity and spufs mkdir fails, requiring ...

PT-2025-14590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer overflow in the xp create and assign umem function. This occurs because the product of the i and pool-chunk size variables, both of type u32, can wrap...

GHSA-G6WM-2V64-WQ36 LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

Description The LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity XXE injection. When processing the CreateBucketConfiguration XML document during bucket creation, the service's XML parser is configured to resolve external entities. This allows an attacker to declare...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25620

Unifiedtransform v2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability within the Create assignment function. An attacker with Teacher privileges can exploit this by creating an assignment and uploading a PDF file containing a malicious XSS payload. When other users, such as tho...

CVE-2025-25620: Improper Neutralization of Input During Web Page Generation

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

Unifiedtransform Cross-Site Scripting Vulnerability

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform version 2.0, which stems from a cross-site scripting vulnerability in the Create assignment function...

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

...

net: inet: do not leave a dangling sk pointer in inet_create()

...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

PT-2025-14356

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel's MLX5 network driver. The problem arises in the mlx5 chains create table function, where the return values of ml...