SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞

SourceCodester Patients Waiting Area Queue Management System is a SourceCodester open source patient waiting area queue management system. A SQL injection vulnerability exists in SourceCodester Patients Waiting Area Queue Management System version 1.0, which stems from incorrect manipulation of t...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2025-13122

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of the file /php/apipatientcheckin.php. Performing manipulation of the argument appointmentID results in sql injection. It is possible to...

CVE-2025-13122 SourceCodester Patients Waiting Area Queue Management System api_patient_checkin.php getPatientAppointment sql injection

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of the file /php/apipatientcheckin.php. Performing manipulation of the argument appointmentID results in sql injection. It is possible to...

CVE-2025-13122

CVE-2025-13122 affects SourceCodester Patients Waiting Area Queue Management System 1.0. The vulnerability is a SQL injection in the getPatientAppointment function in /php/api_patient_checkin.php, triggered by manipulating the appointmentID parameter. This allows remote attack initiation and, per...

CVE-2025-40153

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

SourceCodester Patients Waiting Area Queue SQL注入漏洞

SourceCodester Patients Waiting Area Queue is an open source patient waiting area queuing system from SourceCodester. SourceCodester Patients Waiting Area Queue version 1.0 has a SQL injection vulnerability, the vulnerability stems from the improper handling of the appointmentID parameter in the...

📄 Patients Waiting Area Queue Management System 1.0 SQL Injection

Patients Waiting Area Queue Management System version 1.0 suffers from a remote SQL injection vulnerability. Exploit Title: Patients Waiting Area Queue Management System v1.0 - SQL Injection Exploit Author: Deva Parekh pr0f Date: October 23, 2025 Vendor Homepage:...

Malicious code in polymer-rtte-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30d8dda9cbba94e2df83762e3ac4a3acff7129759138322a639c80ee38e5c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137484

Malicious code in polymer-rtte-area npm...

EUVD-2025-138433

Malicious code in polymer-area-reua npm...

MAL-2025-178084 Malicious code in polymer-rtte-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30d8dda9cbba94e2df83762e3ac4a3acff7129759138322a639c80ee38e5c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40153

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

UBUNTU-CVE-2025-40153

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

CVE-2025-40153 mm: hugetlb: avoid soft lockup when mprotect to large memory area

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

CVE-2025-40153

CVE-2025-40153 : In the Linux kernel, the vulnerability arises when calling mprotect() on large hugetlb memory, causing a soft lockup in the hugetlb code. The fix adds a cond_resched() inside the hugetlb protection change path to avoid long mutual-wait loops (noted in the advisory as triggered by...

Tinycontrol LAN Controller 安全漏洞

Tinycontrol LAN Controller is a building automation controller from the Polish company Tinycontrol. A security vulnerability exists in Tinycontrol LAN Controller v3 1.58a and earlier versions, which stems from a lack of authentication in the stm.cgi endpoint and could lead to a denial of service...

Toward an Intrusion Detection System for a Virtualization Framework in Edge Computing

Edge computing pushes computation closer to data sources, but it also expands the attack surface on resource-constrained devices. This work explores the deployment of the Lightweight Deep Anomaly Detection for Network Traffic LDPI integrated as an isolated service within a virtualization framewor...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990782 advisory. In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLA...

CVE-2025-12942 Improper input validation in NETGEAR R6260 and R6850

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...