CVE-2025-12593

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, wgcf, cluster-api-provider-vsphere, dive,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, juicefs, k3d, pombump, delve, s5cmd, cluster-api-provider-vsphere, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, dynamic-localpv-provisioner, bom, wait-for-port, pguser, sonobuoy, kustomize,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, smarter-device-manager, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, shfmt, wgcf,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, shfmt, wgcf, cluster-api-provider-vsphere, dive...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, smarter-device-manager, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, shfmt, wgcf,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, smarter-device-manager, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, shfmt, wgcf,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, smarter-device-manager, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, shfmt, wgcf,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, crane, helm-set-status, terraform-provider-kubernetes, timoni, runc, podinfo, maru, vault-env, mage, cargobump, vault-k8s, juicefs, smarter-device-manager, speedtest-go, pvc-autoresizer, k3d, delve, s5cmd, shfmt, wgcf,...

EUVD-2025-37439

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-12593 code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-12593 code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-12593

CVE-2025-12593 affects code-projects Simple Online Hotel Reservation System 2.0. The Photo Handler component, via /admin/edit_room.php, lacks validation for uploaded files, enabling unrestricted file uploads. Exploitation is possible remotely and a public exploit exists. Connected sources do not ...

CVE-2025-12593

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-12593

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

Code-Projects Simple Online Hotel Reservation System 代码问题漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System has a code issue vulnerability that stems from a lack of valid validation of uploaded files by the Photo Handler component in file /admin/editroom.php. An attacker can use th...

PT-2025-44731

Name of the Vulnerable Software and Affected Versions code-projects Simple Online Hotel Reservation System version 2.0 Description A flaw exists in code-projects Simple Online Hotel Reservation System 2.0 that allows for unrestricted file uploads. This issue is located within the Photo Handler...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fixed potential memory corruption in ipmicreateuser. The “intf” list iterator becomes an invalid pointer if the correct “intf-intfnum” is not found. Calling atomicdec&intf-nrusers with an invalid pointer will lea...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: venus: protection against spurious interrupts during probing. Ensure that the interrupt handler is initialized before the interrupt is registered. If the IRQ is registered before hficreate, it’s possible that an interrupt...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fixed the check for NULL values in the SCCB SCCB Present Check. The tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is perform...