Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987309 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the...

CVE-2025-11343

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

CVE-2025-11343 code-projects Student Crud Operation delete.php sql injection

A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly an...

CVE-2025-11343

The CVE-2025-11343 entry concerns code-projects Student Crud Operation 3.3, specifically the delete.php file. The vulnerability is a SQL injection triggered by unsafely handling the ID parameter, enabling remote exploitation. Public exploitation is indicated in the documents, with multiple source...

CVE-2025-11272

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...

CVE-2025-11319

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

CVE-2025-11319

CVE-2025-11319 affects the nahiduddinahammed Hospital-Management-System-Website prior to version e6562429e14b2f88bd2139cae16e87b965024097. The vulnerability is a SQL injection in the /delete.php handler, triggered by manipulating the argument ai. The issue is exploitable remotely and, according t...

EUVD-2025-32486

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

CVE-2025-11319 nahiduddinahammed Hospital-Management-System-Website delete.php sql injection

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

CVE-2025-11319 nahiduddinahammed Hospital-Management-System-Website delete.php sql injection

A weakness has been identified in nahiduddinahammed Hospital-Management-System-Website up to e6562429e14b2f88bd2139cae16e87b965024097. This issue affects some unknown processing of the file /delete.php. This manipulation of the argument ai causes sql injection. It is possible to initiate the atta...

Code-Projects Student Crud Operation 安全漏洞

Student Crud Operation is a student information system. Student Crud Operation suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file delete.php. An attacker can exploit this vulnerability to execute...

PT-2025-40846

Name of the Vulnerable Software and Affected Versions nahiduddinahammed Hospital-Management-System-Website versions prior to e6562429e14b2f88bd2139cae16e87b965024097 Description A SQL injection issue exists in the /delete.php file processing of the ai argument. This manipulation can be initiated...

Hospital-Management-System SQL注入漏洞

Hospital-Management-System is a hospital management system by Karthik Individual Developer. Hospital-Management-System suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter ai in the file /delete.php, which could lead to a SQL injection attack...

📄 WordPress KKProgressbar2 1.1.4.2 Cross Site Request Forgery

WordPress KKProgressbar2 version 1.1.4.2 cross site request forgery proof of concept exploit. Exploit Title: WordPress Plugin KKProgressbar2 - Cross-Site Request Forgery CSRF Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H:...

PT-2025-40937

Name of the Vulnerable Software and Affected Versions code-projects Student Crud Operation version 3.3 Description A security issue exists in the delete.php file within code-projects Student Crud Operation 3.3. The manipulation of the ID argument can lead to SQL injection. This issue is potential...

cnic: Fix use-after-free bugs in cnic_delete_task

...

SUSE CVE-2022-50481

In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in cxlregisterafu|adapter, the device is not added, deviceunregister can not be called in the error path, otherwise it will cause a null-ptr-dere...

SUSE CVE-2023-53549

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/deleting large number of elements in one step in ipset, it can take a reasonable amount of time and can result in soft lockup errors. The patch...

SUSE CVE-2025-39945

In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnicdeletetask The original code uses canceldelayedwork in cniccmstopbnx2xhw, which does not guarantee that the delayed work item 'deletetask' has fully completed if it was already running...

EUVD-2025-32435

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...