Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986706 advisory. In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in emspcmciaaddcard If the last channel is not available then de...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414603 advisory. nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after- free that could be triggered by local attackers with access to t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986733 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call...

PT-2025-41190

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A flaw exists in Campcodes Advanced Online Voting Management System that allows for SQL injection. The issue is located in the file /admin/voters add.php and involves...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-393292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393292 advisory. In the Linux kernel, the following vulnerability has been resolved: ila: serialize calls to nfregisternethooks syzbot found a race in ilaaddmapping 1 commit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391635 advisory. In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefilesaddcache The following memory leak was reported after...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381767 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987392)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987392 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd,...

PT-2025-41202

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A weakness exists in Campcodes Advanced Online Voting Management System 1.0. The issue affects unknown code within the /admin/voters add.php file. Manipulation of the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986631 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sfp: fix memory leak in sfpprobe sfpprobe allocates a memory chunk from sfp with sfpalloc...

PT-2025-40957

Name of the Vulnerable Software and Affected Versions code-projects Student Crud Operation versions up to 3.3 Description A flaw exists in code-projects Student Crud Operation that allows for unrestricted file uploads. This is due to manipulation of the move uploaded file function within the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from blk-iolatency not properly cleaning up memory when adddisk fails, which could lead to a memory leak...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-416543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-416543 advisory. In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blkaddpartition The blkaddpartition function...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986763 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix percpu memory leak at nftablesaddchain It seems to me that percpu memory...

PT-2025-41192

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.46 Description A flaw exists in the Linker component of GNU Binutils, specifically within the elf link add object symbols function located in the bfd/elflink.c file. This issue leads to an out-of-bounds read...

PT-2025-41037

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1+ 189 Description The Linux kernel contains a flaw within the mpt3sas transport port add function in the SCSI subsystem. Specifically, if sas rphy add fails, the necessary resource freeing via sas rphy...

CVE-2025-40989

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectmessage/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a speciall...

EUVD-2025-32531

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

CVE-2025-11333

CVE-2025-11333 affects langleyfcu Online Banking System up to version 57437e6400ce0ae240e692c24e6346b8d0c17d7a, specifically the Add Customer Page file /customer_add_action.php. The vulnerability arises from manipulation of the First Name parameter, causing cross-site scripting. Remote exploitati...