oa_system 跨站脚本漏洞

oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem versions prior to v2025.01.01, which stems from improperly cleaned input of the parameter password in t...

PT-2025-21246 · Oa System · Oa System

Name of the Vulnerable Software and Affected Versions: OA System versions prior to 2025.01.01 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at the "/inform/InformManageController.java...

Online Birth Certificate System /admin/bwdates-reports-details.php File SQL Injection Vulnerability

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System has a SQL injection vulnerability that originates from an incorrect manipulation of the parameter fromdate in the /admin/bwdates-reports-details.php file that results in SQL injection. No detail...

PT-2025-20970

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service versions affected versions not specified Description: The issue is a heap-based buffer overflow in the Remote Desktop Gateway Service, allowing an unauthorized attacker to execute code over a network. This enabl...

CVE-2025-4499

A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is the function Add of the component Add Information. The manipulation of the argument xi.name/xi.disease leads to stack-based buffer overflow. The attack needs ...

Code-Projects Album Management System 安全漏洞

Code-Projects Album Management System is an open source album management system from Code-Projects. A security vulnerability exists in Code-Projects Album Management System version 1.0, which stems from vulnerability to stack buffer overflow attacks...

CVE-2025-1330 IBM CICS TX code execution

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function...

Security Bulletin: Vulnerability in requests affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-35195].

Summary The requests package is used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2024-35195. Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local authenticated attacker to bypass security...

CVE-2025-47540

Summary: CVE-2025-47540 affects WordPress weMail up to version 1.14.13, enabling exposure of sensitive system information to an unauthorized control sphere and retrieval of embedded sensitive data. The NVD/CVSS metrics indicate a high-severity, network-exploitable issue (CVSS v3.1: AV:N/AC:L/PR:N...

CVE-2025-46584

Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Brilliance Golden Link Secondary System 安全漏洞

Brilliance Golden Link Secondary System is a management system from Brilliance, China. A security vulnerability exists in Brilliance Golden Link Secondary System version 20250424 and earlier, which is caused by a SQL injection due to incorrect manipulation of the parameter dictCn1 in the file...

PT-2025-24447

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code may allow a lock screen bypass, potentially leading to local privilege escalation without requiring additional execution privileges or user interaction. The...

PT-2025-24453

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The vulnerability resides within the System component of the Android operating system, stemming from improper code generation management. Remote attackers can potentially execute arbitrary...

PT-2025-18952 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System. The issue affects an unknown function of the file...

CVE-2023-53099 firmware: xilinx: don't make a sleepable memory allocation from an atomic context

In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The following issue was discovered using lockdep: 6.691371 BUG: sleeping function called from invalid context at include/linux/sched/mm.h:209...

The vulnerability of iOS and iPadOS operating systems, related to incorrect authorization, allows attackers to disclose sensitive information.

The vulnerability of iOS and iPadOS operating systems is related to improper authorization. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2022-49880

In the Linux kernel, the following vulnerability has been resolved: ext4: fix warning in 'ext4dareleasespace' Syzkaller report issue as follows: EXT4-fs loop0: Free/Dirty block details EXT4-fs loop0: freeblocks=0 EXT4-fs loop0: dirtyblocks=0 EXT4-fs loop0: Block reservation details EXT4-fs loop0:...

CVE-2022-49833

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: clone zoned device info when cloning a device When cloning a btrfsdevice, we're not cloning the associated btrfszoneddeviceinfo structure of the device in case of a zoned filesystem. Later on this leads to a NULL...

CVE-2022-49809

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix skb leak in x25lapbreceiveframe x25lapbreceiveframe using skbcopy to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak...

CVE-2025-37769

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/smu11: Prevent division by zero The user can set any speed value. If speed is greater than UINTMAX/8, division by zero is possible. Found by Linux Verification Center linuxtesting.org with SVACE. cherry picked from...