EUVD-2021-15492

Malware in sbrugna...

EUVD-2021-1912

Malware in sbrugna...

EUVD-2025-32895

Nagios Log Server before 2024R1.3.2 allows authenticated users with read-only API access to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response...

CVE-2025-11347: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function moveuploadedfile of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated...

Code-Projects Student Crud Operation Code Issues and Vulnerabilities

Code-Projects Student Crud Operation is a Code-Projects open source student information system. A code issue vulnerability exists in Code-Projects Student Crud Operation version 3.3 and earlier, which stems from improper manipulation of the moveuploadedfile function in the file add.php, which can...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986562 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix underflow in second superblock position calculations Macro NILFSSB2OFFSETBYTES, which...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986370 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986312)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986312 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414626 advisory. A race condition was discovered in getoldroot in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service BUG because of...

PT-2025-44115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s io uring/waitid functionality. Specifically, the io waitid wait function did not consistently remove its entry from the wait queue entry list upon a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986419)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986419 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: add reserved GDT blocks check We capture a NULL pointer issue when resizing a corrupt ext4...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-395316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-395316 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986867)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986867 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop In zynqqspiexecmemop,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-382688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382688 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382740)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382740 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2setbufferuptodate When doing cleanup, if flags without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414653)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414653 advisory. A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user coul...

CVE-2025-11343

The CVE-2025-11343 entry concerns code-projects Student Crud Operation 3.3, specifically the delete.php file. The vulnerability is a SQL injection triggered by unsafely handling the ID parameter, enabling remote exploitation. Public exploitation is indicated in the documents, with multiple source...

CVE-2025-11343 code-projects Student Crud Operation delete.php sql injection

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

CVE-2025-11343 code-projects Student Crud Operation delete.php sql injection

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

PT-2025-40937

Name of the Vulnerable Software and Affected Versions code-projects Student Crud Operation version 3.3 Description A security issue exists in the delete.php file within code-projects Student Crud Operation 3.3. The manipulation of the ID argument can lead to SQL injection. This issue is potential...