Tenda G3 DNS Forward Rule Store Buffer Overflow DoS

The vulnerability of the dnsforwardrulestore function in the Tenda G3 wireless access point’s microprogramming software is related to buffer overflows due to stack-based processing of the rules parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sendin...

PT-2025-39854

Name of the Vulnerable Software and Affected Versions FairSketch RISE Ultimate Project Manager & CRM version 3.9.4 Description A cross-site scripting XSS issue exists in FairSketch RISE Ultimate Project Manager & CRM. An administrator can store a JavaScript payload via the file explorer within th...

dell-wmi-sysman Driver DoS

The vulnerability of the currentpasswordstore function in the dell-wmi-sysman driver for Linux operating systems is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-11070 Projectworlds Online Shopping System cart_add.php sql injection

A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cartadd.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

fwupd:efi-volume_fuzzer: Heap-buffer-overflow in fu_byte_array_set_size

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=6697581892927488 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: efi-volumefuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7ac3ebbe20...

CVE-2025-11070: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cartadd.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

Projectworlds Online Shopping System SQL Injection Vulnerability

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Shopping System version 1.0, which stems from a misuse of the parameter ID in the file /store/cartadd.php, which could lead to a...

PT-2025-39735

Name of the Vulnerable Software and Affected Versions Projectworlds Online Shopping System version 1.0 Description A flaw exists in Projectworlds Online Shopping System that allows for SQL injection. This issue affects an unknown part of the /store/cart add.php file. Manipulation of the ID argume...

[SECURITY] [DSA 6012-1] nncp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6012-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 26, 2025 https://www.debian.org/security/faq -...

Neon App pays users to record their phone calls, sells data for AI training [updated]

TechCrunch reports about a “bizarre app” inviting you to record and share your audio calls so that it can sell the data to AI companies. And if that’s not weird enough on its own, it’s ranking No. 2 in Apple's US app store at the time of writing. The name of the app is Neon Mobile and it promises...

CVE-2025-47316

Memory corruption due to double free when multiple threads race to set the timestamp store...

CVE-2025-58017

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.8.6...

CVE-2025-47316

Memory corruption due to double free when multiple threads race to set the timestamp store...

CVE-2025-47316 Double Free in Video

Memory corruption due to double free when multiple threads race to set the timestamp store...

CVE-2025-47316 Double Free in Video

Memory corruption due to double free when multiple threads race to set the timestamp store...

CVE-2025-47316

The CVE-2025-47316 entry describes a memory corruption issue caused by a double free when multiple threads race to set the timestamp store. The vulnerability is characterized as a local attack with high impact on confidentiality, integrity, and availability per the provided metrics (CVSS 3.1: AV:...

PT-2025-39279

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists due to a double free condition when multiple threads simultaneously attempt to set the timestamp store. This can lead to instability or potential code execution...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets, which stems from a double release when a multi-threaded contention sets up a timestamp store, potentially leading to memory corruption...

CVE-2025-58017

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.8.6...

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.8.6...