CVE-2025-63948

A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation...

The vulnerability of the tipc_exit_net() function in the net/tipc/core.c module of the TIPC protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tipcexitnet function in the net/tipc/core.c module of the TIPC protocol implementation in Linux’s operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability in the implementation of the zipx_lzma_alone_init() function of the libarchive library allows a attacker to disclose protected information or cause service failures.

The vulnerability of the implementation of the zipxlzmaaloneinit function in the libarchive library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information or cause service failures...

The vulnerability of the `ntfs_compressed_pwrite` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfscompressedpwrite function in the NTFS file system driver for the FUSE NTFS-3G module relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the host_alt_filter parameter in the monitoring software device_list.php for Advantech R-SeeNet routers allows a hacker to disclose protected information.

The vulnerability of the hostaltfilter parameter in the Advantech R-SeeNet monitoring software’s devicelist.php script is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

The vulnerability of the `gtkui_conf_read()` function in the `src/interfacesgtk/ec_gtk_conf.c` component of the Ettercap MITM attack protection tool, related to buffer-overflow operations, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gtkuiconfread function in the src/interfacesgtk/ecgtkconf.c file of the Ettercap security tool is related to the lack of checking on the owner of the /tmp/.ettercapgtk file. Exploiting this vulnerability can allow a perpetrator to access confidential data, compromise its...