HUSTOJ security vulnerabilities

HUSTOJ is a popular OJ system by the individual developer Zhang Haobin zhblue in China. A security vulnerability exists in HUSTOJ version 2025-01-31, which stems from parameter injection and could lead to cross-site scripting attacks...

GHSA-MP56-7VRW-QXVF

creationtimestamp| type| source ---|---|--- 2025-08-18 21:12:49+00:00| published-proof-of-concept| https://t.me/cKure/15266 2026-07-21 13:00:07+00:00| published-proof-of-concept| https://t.me/ckuRED/643 2026-07-22 00:00:24+00:00| published-proof-of-concept| https://t.me/ckuRED/643...

CVE-2025-55587

creationtimestamp| type| source ---|---|--- 2025-08-18 19:38:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115051457254811933...

CVE-2025-54421

creationtimestamp| type| source ---|---|--- 2025-08-18 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwoz3pl5mb2g...

CVE-2025-36120

creationtimestamp| type| source ---|---|--- 2025-08-18 14:06:13+00:00| seen| Telegram/ZFAhKaQ5x80bL7hByvF9h0qIvrR0A2DOR6YW6YJRgsNRXZM...

CVE-2025-38495

creationtimestamp| type| source ---|---|--- 2025-08-18 12:57:24+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwoh5wd43k2k 2025-08-18 14:25:55+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwom472ww22k 2025-08-18 17:47:35+00:00| seen|...

CVE-2025-5296

creationtimestamp| type| source ---|---|--- 2025-08-18 12:12:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwoeo4sdfe2l 2025-09-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-266-03 2025-09-23 20:03:11+00:00| seen|...

RHSA-2024:1879

creationtimestamp| type| source ---|---|--- 2025-08-18 09:06:39+00:00| seen| Telegram/nf9XZ1EnojkXdV1FR02Ce4mSlWf0BeretyAUD2ZOqWynuI...

CVE-2025-8293

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-9101

creationtimestamp| type| source ---|---|--- 2025-08-18 04:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwnk5mgveo26...

CVE-2025-9098

creationtimestamp| type| source ---|---|--- 2025-08-18 04:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwnjunkeoi26...

CVE-2019-11244

creationtimestamp| type| source ---|---|--- 2025-08-17 22:39:33+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwmx7z27oo2v...

CVE-2025-8105

creationtimestamp| type| source ---|---|--- 2025-08-17 07:31:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwleijdh332g...

CVE-2025-9010

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bookingreport.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-8993

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-38545

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skbsharedinfo While transitioning from netdevallocipalign to buildskb, memory for the "skbsharedinfo" member of an "skb" was not allocated. Fix this by allocating...

CVE-2025-38547

In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20xadc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning. Add the missing sentinel entry...

CVE-2025-38540

In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics HP 5MP Cameras USB ID 04F2:B824 & 04F2:B82C report a HID sensor interface that is not actually implemented. Attempting to access this...

CVE-2025-38503

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space tree with the block group tree feature enabled, we can hit an assertion failure like this: BTRFS info device loop0 state M: rebuilding free space tre...

CVE-2025-38521

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetting the GPU The GPU hard reset sequence calls pmruntimeforcesuspend and pmruntimeforceresume, which according to their documentation should only be used during system-wide PM...