16241 matches found
Das Parking Management System SQL注入漏洞
Das Parking Management System is a parking management system from Das Corporation in China. A SQL injection vulnerability exists in Das Parking Management System version 6.2.0, which is caused by incorrect manipulation of the parameter Value in the file /IntraFieldVehicle/Search...
CVE-2025-6117: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnerability affects unknown code of the file /Reservations/Search of the component API. The manipulation of the argument Value leads to sql injection. The attack can be initiated...
PT-2025-26910 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: ndpi affected versions not specified Description: The software contains a use-of-uninitialized-value issue. This occurs within the ndpi strdup function, which is called during ndpi detection process packet processing, as reported in fuzzing...
[SECURITY] Fedora 42 Update: valkey-8.0.3-3.fc42
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
I Know What You Said: Unveiling Hardware Cache Side-Channels in Local Large Language Model Inference
Large Language Models LLMs that can be deployed locally have recently gained popularity for privacy-sensitive tasks, with companies such as Meta, Google, and Intel playing significant roles in their development. However, the security of local LLMs through the lens of hardware cache side-channels...
ndpi:fuzz_config: Use-of-uninitialized-value in ndpi_strdup
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6742003083968512 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfig Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ndpistrdu...
CVE-2024-44905
go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...
SUSE-SU-2025:01941-1 Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content bsc1241865...
[SECURITY] Fedora 41 Update: valkey-8.0.3-3.fc41
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Salt 安全漏洞
Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from the failure to clean up the input value jid in the main pubret method, which could lead to a denial of servi...
Fedora: Security Advisory (FEDORA-2025-879f3d7695)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-4418 AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the /types/appendvalue.go component. When a placeholder is directly preceded by a minus - and not separated by any whitespace, the library does not handle the particular case when a negative number is inserted for the...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the /types/appendvalue.go component. When a placeholder is directly preceded by a minus - and not separated by any whitespace, the library does not handle the particular case when a negative number is inserted for the...
UBUNTU-CVE-2024-44905
go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...
CVE-2025-44043
Keyoti SearchUnit prior to 9.0.0. is vulnerable to Server-Side Request Forgery SSRF in /KeyotiSearchEngineWebCommon/SearchService.svc/GetResults and /KeyotiSearchEngineWebCommon/SearchService.svc/GetLocationAndContentCategories. An attacker can specify their own SMB server as the indexDirectory...
OSV-2025-456 Use-of-uninitialized-value in ppd_hash_option
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423674620 Crash type: Use-of-uninitialized-value Crash state: ppdhashoption cupsArrayFind ppdFindOption...
CVE-2025-4418: Improper Validation of Integrity Check Value
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...
EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2025-1663)
According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or...