Medium: libgepub

Issue Overview: A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop...

CVE-2025-7151

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/votersadd.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be initiated remotely. The...

Scalable Video Transcoding on Linode with Kubernetes and Capella

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nvme-tcp unvalidated request lists, which could lead to a request processing loop...

Semi-Fragile Watermarking of Remote Sensing Images Using DWT, Vector Quantization and Automatic Tiling

A semi-fragile watermarking scheme for multiple band images is presented in this article. We propose to embed a mark into remote sensing images applying a tree-structured vector quantization approach to the pixel signatures instead of processing each band separately. The signature of the...

The vulnerability of the Response Header Handler component in the Craft CMS system allows a hacker to execute arbitrary code.

The vulnerability of the Response Header Handler component in the Craft CMS content management system is related to errors in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-29236 · Juniper Networks · Acx2200 +8

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on ACX1000, ACX1100, ACX2000, ACX2100, ACX2200, ACX4000, ACX5048, and ACX5096 versions prior to 21.2R3-S9 Description: An improper handling of exceptional conditions exists in the route processing of Junos OS on...

Automated Attack Testflow Extraction from Cyber Threat Report Using BERT for Contextual Analysis

In the ever-evolving landscape of cybersecurity, the rapid identification and mitigation of Advanced Persistent Threats APTs is crucial. Security practitioners rely on detailed threat reports to understand the tactics, techniques, and procedures TTPs employed by attackers. However, manually...

The vulnerability of Atlassian Jira’s data processing software, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.

The vulnerability of Atlassian Jira’s data processing products is related to insufficient protection when entering CSRF requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

CVE-2025-7182

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

CVE-2025-7182 itsourcecode Student Transcript Processing System edit.php cross site scripting

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

CVE-2025-7182 itsourcecode Student Transcript Processing System edit.php cross site scripting

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

CVE-2025-7182

The CVE-2025-7182 entry concerns itsourcecode Student Transcript Processing System 1.0. A vulnerability exists in the /admin/modules/subject/edit.php file where manipulation of the pre parameter enables cross-site scripting. The attack can be launched remotely, and the exploit has been publicly d...

CVE-2025-7345 Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

CVE-2025-21426

Memory corruption while processing camera TPG write request...

CVE-2025-27058

CVE-2025-27058 is a memory corruption issue in Qualcomm chipsets triggered by processing exceedingly large packets. Affected component/impact: high-severity (CVSS v3.1: High confidentiality, integrity, availability; Local attack, low exploitability required). No exploitation details are provided ...

CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet...

CVE-2025-27052

CVE-2025-27052 is a memory corruption issue in Qualcomm chipsets where data packets processed by the diagnostic interface from Unix clients trigger corruption. Affected component: Qualcomm diag handling (including closed-source components). Root cause: memory corruption during processing of diagn...

CVE-2025-27051 Double Free in Windows WLAN Host

Memory corruption while processing command message in WLAN Host...

CVE-2025-27051

CVE-2025-27051 affects Qualcomm WLAN Host memory handling, with memory corruption occurring while processing a command message. The CVSS 3.1 vector (Local attack, Low complexity, Low privileges, no user interaction) yields a base score of 7.8 (High impact for confidentiality, integrity, and avail...