CVE-2025-4889

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4889

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4889 code-projects Tourism Management System User Registration AddUser buffer overflow

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4889

CVE-2025-4889 affects code-projects Tourism Management System 1.0, specifically the AddUser function in the User Registration component. The vulnerability is a buffer overflow caused by manipulating the username and password arguments, requiring local access. The CVE notes that the exploit has be...

CVE-2025-4742

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpovanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery...

CVE-2024-45067

Incorrect default permissions in some IntelR GaudiR software installers before version 1.18 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-30663

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

OESA-2025-1528 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via...

K000151376: Intel CPU vulnerability CVE-2025-20004

Security Advisory Description Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-20004 Impact There is no impact; F5...

K000151375: Intel Slim Bootloader vulnerability CVE-2025-20083

Security Advisory Description Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-20083 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

CVE-2025-4742

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpovanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery...

CVE-2025-4742 XU-YIJIE grpo-flat grpo_vanilla.py main deserialization

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpovanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery...

CVE-2025-4742

CVE-2025-4742 affects XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. The vulnerable component is the function main in the file grpo_vanilla.py , where input manipulation leads to a deserialization issue. Local access is required to exploit. The product uses continuous delivery...

SUSE CVE-2024-43420

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure via local access...

PT-2025-21632 · Cbewin · Cbewin Anytxt Searcher

Name of the Vulnerable Software and Affected Versions: CBEWIN Anytxt Searcher version 1.3.1128.0 Description: A critical vulnerability was found in CBEWIN Anytxt Searcher, affecting the file ATService.exe. This issue leads to an uncontrolled search path. The attack requires local access and has a...

PT-2025-21600 · Xu Yijie · Grpo-Flat

Name of the Vulnerable Software and Affected Versions: XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856 Description: A vulnerability has been found in the function main of the file grpo vanilla.py. The manipulation leads to deserialization. Local access is required to approach th...

CVE-2025-21099

Uncontrolled search path for some IntelR Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20031

Improper input validation for some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...