CVE-2025-9189

There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

CVE-2025-57777

There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. Th...

CVE-2025-57777 Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab

There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. Th...

CVE-2025-57775

Digilent DASYLab DSB file parsing heap-based buffer overflow is the root cause of CVE-2025-57775. The flaw arises from improper bounds checking when processing DSB files, enabling arbitrary code execution if a user opens a specially crafted DSB file. Affected product: Digilent DASYLab (all versio...

CVE-2025-9188

Digilent DASYLab is affected by a deserialization of untrusted data vulnerability when parsing DSB files, enabling arbitrary code execution. Exploitation requires a user to open a specially crafted DSB file (user interaction). The issue is present across DASYLab versions and has been discussed in...

CVE-2025-57778

Digilent DASYLab DSB file parsing vulnerability (CVE-2025-57778): out-of-bounds write due to improper bounds checking enables arbitrary code execution when a user opens a malicious DSB file. Affected software is DASYLab; parsing of DSB files is the root cause. ZDI-25-891 confirms remote code exec...

CVE-2025-57778 Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

CVE-2025-57774

CVE-2025-57774 is an out-of-bounds write in Digilent DASYLab’s DSB file parser. Several sources (NVD, Red Hat, ZDI, CVE lists) describe a flaw caused by improper bounds checking that can lead to arbitrary code execution when a user opens a specially crafted DSB file. The attack requires user inte...

CVE-2025-9189

CVE-2025-9189 concerns Digilent DASYLab: an out-of-bounds write while parsing DSB files, caused by improper bounds checking, which can lead to arbitrary code execution. Affected: all DASYLab versions (per initial docs). Exploitation requires user to open a crafted DSB file; the vulnerability is l...

CVE-2025-9189 Out Of Bounds Write when parsing a DSB file with Digilent DASYLab

There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

PT-2025-35599

Name of the Vulnerable Software and Affected Versions DASYLab affected versions not specified Description DASYLab is susceptible to an out-of-bounds write due to improper bounds checking when parsing a DSB file. This can lead to arbitrary code execution if a user opens a specially crafted DSB fil...

Apartment Management System rented_all_info.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter uid in the file /odashboard/rentedallinfo.php for externally entered SQL statements. An attacker can exploi...

PT-2025-35598

Name of the Vulnerable Software and Affected Versions DASYLab affected versions not specified Description DASYLab is susceptible to an out-of-bounds write due to insufficient bounds checking when parsing DSB files. This can lead to an invalid source address and potentially result in arbitrary cod...

PT-2025-35601

Name of the Vulnerable Software and Affected Versions Digilent DASYLab affected versions not specified Description A heap-based buffer overflow exists due to improper bounds checking when parsing a DSB file. Successful exploitation requires a user to open a specially crafted DSB file, potentially...

PT-2025-35603

Name of the Vulnerable Software and Affected Versions Digilent DASYLab affected versions not specified Description Digilent DASYLab is susceptible to a deserialization of untrusted data issue that could lead to arbitrary code execution. An attacker can exploit this by tricking a user into opening...

CVE-2025-9792 itsourcecode Apartment Management System e_all_info.php sql injection

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /edashboard/eallinfo.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-9597

A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /odashboard/rentedallinfo.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available...

WordPress Plugin All Bootstrap Blocks Access Control Break Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in the WordPress plugin All Bootstrap Blocks, which...

CVE-2025-58212

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in epeken Epeken All Kurir epeken-all-kurir allows DOM-Based XSS.This issue affects Epeken All Kurir: from n/a through = 2.0.1...

BIT-KIBANA-2025-25010 Kibana privilege escalation via reporting_user role

Incorrect authorization in Kibana can lead to privilege escalation via the built-in reportinguser role which incorrectly has the ability to access all Kibana Spaces...