Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Do not call mmput from the MMU notifier callback. If the process exits, the mmput call within the MMU notifier callback from compactd, fork, or numa balancing may release the last reference to the mm struct. This coul...

EUVD-2025-29613

Malicious code in bioql PyPI...

CVE-2025-56293

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...

CVE-2025-56293

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...

CVE-2025-56293

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...

CVE-2025-56293

The code-projects Human Resource Integrated System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is an incorrectly filtered input within the Childs Name field in the Add Child Information section. Exploitation of this flaw can allow an attacker to perform a cross-site scripting...

PT-2025-37996

Name of the Vulnerable Software and Affected Versions: code-projects Human Resource Integrated System version 1.0 Description: The Human Resource Integrated System is susceptible to Cross Site Scripting XSS attacks. This issue affects the Add Child Information section, specifically within the...

CVE-2025-56293: Improper Neutralization of Input During Web Page Generation

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...

CVE-2025-38520

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mmput inside mmu notifier callback from compactd or fork or numa balancing could release the last reference of mm struct to call exitmmap and...

CVE-2021-32639

Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery SSRF. In particular, the RegisterPeerAction endpoint and the AddChildDirectoryAction endpoint are vulnerable to SSRF. This vulnerability may lead to credential leaks. Emissary...