PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

CVE-2022-50286 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline

In the Linux kernel, the following vulnerability has been resolved: ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline When converting files with inline data to extents, delayed allocations made on a file system created with both the bigalloc and inline options can result in...

CVE-2025-39722

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP Since the CAAM on these SoCs is managed by another ARM core, called the SECO Security Controller on iMX8QM and Secure Enclave on iMX8ULP, which also reserves access to...

SUSE CVE-2025-38722

In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in exportdmabuf As soon as we'd inserted a file reference into descriptor table, another thread could close it. That's fine for the case when all we are doing is returning that descriptor to userland it's a...

CVE-2025-38722

In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in exportdmabuf As soon as we'd inserted a file reference into descriptor table, another thread could close it. That's fine for the case when all we are doing is returning that descriptor to userland it's a...

DEBIAN-CVE-2025-38722

In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in exportdmabuf As soon as we'd inserted a file reference into descriptor table, another thread could close it. That's fine for the case when all we are doing is returning that descriptor to userland it's a...

UBUNTU-CVE-2025-38722

In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in exportdmabuf As soon as we'd inserted a file reference into descriptor table, another thread could close it. That's fine for the case when all we are doing is returning that descriptor to userland it's a...

CVE-2025-38722 habanalabs: fix UAF in export_dmabuf()

In the Linux kernel, the following vulnerability has been resolved: habanalabs: fix UAF in exportdmabuf As soon as we'd inserted a file reference into descriptor table, another thread could close it. That's fine for the case when all we are doing is returning that descriptor to userland it's a...

CVE-2025-38722

CVE-2025-38722: Linux kernel HABANA Labs export_dmabuf() UAF due to race between descriptor table fd_install() and object destruction in ->release(). Root cause: a descriptor in dma_buf_fd() may be installed and used while the referenced file/object could be freed, leading to use-after-free. M...

CVE-2025-9789

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2025-9790

A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public...

CVE-2025-9790

A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public...

CVE-2025-9790

The CVE-2025-9790 entry concerns SourceCodester Hotel Reservation System v1.0. Affected component: /admin/updateabout.php; vulnerability: SQL injection via the address parameter. Reported as remote and publicly exploitable, with high impact indicators (confidentiality, integrity, availability) ac...

CVE-2025-9790 SourceCodester Hotel Reservation System updateabout.php sql injection

A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public...

CVE-2025-9790 SourceCodester Hotel Reservation System updateabout.php sql injection

A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public...

CVE-2025-9789

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2025-9789 SourceCodester Online Hotel Reservation System edituser.php sql injection

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2025-9789 SourceCodester Online Hotel Reservation System edituser.php sql injection

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2025-9789

CVE-2025-9789 affects SourceCodester Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in the file /admin/edituser.php, caused by manipulation of the userid parameter. Exploitation can be remote and publicly available exploit code exists. Connected sources also corroborat...

SourceCodester Online Hotel Reservation System 安全漏洞

SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. A security vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the parameter userid in the file...