CVE-2025-26978: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

WordPress plugin FS Poster SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2025-23188

An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing unauthorized access to perform actions beyond their intended permissions. This causes a low impact on integrity with no impact on confidentiality and availability...

CVE-2025-25625

A stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d118101 and web firmware v2.2.2, which allows an authenticated web interface user to bypass input filtering on user names, and stores un-sanitized HTML and Javascript on t...

CVE-2025-25625: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d118101 and web firmware v2.2.2, which allows an authenticated web interface user to bypass input filtering on user names, and stores un-sanitized HTML and Javascript on t...

CVE-2025-25625

A stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d118101 and web firmware v2.2.2, which allows an authenticated web interface user to bypass input filtering on user names, and stores un-sanitized HTML and Javascript on t...

PT-2025-11186 · Fs · Fs Inc S3150 8T2F Switch

Name of the Vulnerable Software and Affected Versions: FS Inc S3150 8T2F Switch versions s3150-8t2f-switch-fsos-220d 118101 and web firmware v2.2.2 Description: A stored cross-site scripting vulnerability exists in the web management interface of the FS model S3150-8T2F switches. This allows an...

CVE-2025-25625

A stored cross-site scripting (XSS) vulnerability exists in the web management interface of FS Inc S3150-8T2F switches running firmware s3150-8t2f-switch-fsos-220d_118101 and web firmware v2.2.2 . The root cause is a failure to properly filter input for user names , allowing an authenticated user...

CVE-2025-21846: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

CVE-2025-23188

An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing unauthorized access to perform actions beyond their intended permissions. This causes a low impact on integrity with no impact on confidentiality and availability...

CVE-2025-23188: Missing Authorization

An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing unauthorized access to perform actions beyond their intended permissions. This causes a low impact on integrity with no impact on confidentiality and availability...

PT-2025-10665

Name of the Vulnerable Software and Affected Versions FS-RBD affected versions not specified Description The issue is related to a missing authorization check in an IBS module, allowing an authenticated user with low privileges to perform actions beyond their intended permissions. This results in...

PT-2025-16720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer overflow in the hdr first de function within the fs/ntfs3 component of the Linux kernel. This occurs when the de off and used variables, which are...

Linux Distros Unpatched Vulnerability : CVE-2024-53219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB kernel module kept in a virtio-fs with cache disabled, the following...

PT-2025-16721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to integer overflows on 32bit systems in the fs/ntfs3 component of the Linux kernel. Specifically, the "off + sizeofstruct NTFS DE" addition can cause an integer...

Linux Distros Unpatched Vulnerability : CVE-2022-0358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user c...

Exploit for CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripti...

PT-2025-9647

Name of the Vulnerable Software and Affected Versions The Structured Content JSON-LD wpsc plugin for WordPress versions up to, and including, 6.4.5 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's sc fs local busines...

Linux Distros Unpatched Vulnerability : CVE-2021-20263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the virtio-fs shared file system daemon virtiofsd of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest ...

Linux Distros Unpatched Vulnerability : CVE-2020-10717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A potential DoS flaw was found in the virtio-fs shared file system daemon virtiofsd implementation of the QEMU version = v5.0. Virtio-fs is meant to share a hos...