CVE-2025-26427

In multiple locations, there is a possible Android/data access due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-9154

A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /user/page-login.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been published and m...

CVE-2024-3316

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/viewcategory.php. The manipulation of the argument id leads to sql injection. The attack...

The vulnerability of the KWHotel software for hotel management lies in the lack of a mechanism to neutralize elements in the CSV file, allowing a hacker to trigger a service failure.

The vulnerability of the KWHotel hotel management software is related to the lack of mechanisms for neutralizing elements in the CSV file. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2024-5493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2024-34679 · Ability · Ability

Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: A permission control vulnerability is present in the ability module. Successful exploitation of this vulnerability may cause features to function abnormally. Recommendations: At the...

CVE-2024-7277

A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be...

PT-2024-11773 · Huawei · Huawei Smart Speakers

Name of the Vulnerable Software and Affected Versions: Huawei smart speakers affected versions not specified Description: The issue is related to a memory overflow, which may cause certain functions to fail upon successful exploitation. Recommendations: At the moment, there is no information abou...

PT-2024-16118 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild versions up to 3.5.5 Description: A critical issue has been found in the function readRawText of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched...

PT-2023-16521 · Zephyrproject +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows for the input of an invalid pointer, which can cause the device to crash. With more knowledge of the device's memory layout, further exploitation is possible...

Mozilla Firefox ESR 资源管理错误漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox ESR prior to 102.10, which can be exploited by an attacker to incorrectly release a pointer to control memory...

SUSE CVE-2019-25037

Unbound before 1.9.5 allows an assertion failure and denial of service in dnamepktcopy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

Dell Container Storage Modules 操作系统命令注入漏洞

Dell Container Storage Modules are a set of modules from Dell, Inc. It is designed to provide additional functionality beyond what is available in container storage. An operating system command injection vulnerability exists in Dell Container Storage Modules versions 1.3.0 and later, prior to...

DEBIAN-CVE-2022-0454

Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser that comes with versions of Windows 10 and later, and a spoofing vulnerability exists in Microsoft Edge Chromium-based. An attacker could exploit this vulnerability to conduct spoofing attacks...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP is vulnerable to a code issue that could be exploited by an attacker to cause a denial of service on the BIG-IP...

PUB-A-172312730

In Lagmax of polwgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2024-11129 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been resolved in the Linux kernel, specifically in the mt7615 coredump work routine. This issue is similar to one previously fixed in the mt7921 coredump work routine...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-62402)

Hancom Office 2020 offers a feature-rich set of desktop productivity applications for performing common tasks such as word processing, spreadsheet modeling, graphical representation, and working with PDFs. A memory corruption vulnerability exists in Hancom Office 2020, which can be exploited by a...

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...