PT-2025-34906

Name of the Vulnerable Software and Affected Versions: simple-admin-core versions 1.2.0 through 1.6.7 Description: An issue exists in the /sys-api/role/update interface of the simple-admin-core system. This interface has a SQL injection vulnerability that may lead to partial data leakage or...

CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

The vulnerability of the io_wq_free_work function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iowqfreework function in Linux kernel is related to errors during link counter updates. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) – systems for controlling access to virtual environments – allows a perpetrator to execute arbitrary code and trigger service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

Linux Distros Unpatched Vulnerability : CVE-2024-53259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used...

The vulnerability of the IBM InfoSphere Data Replication software configuration lies in buffer overflows in the stack, which allows an attacker to trigger a service failure.

The vulnerability of the IBM InfoSphere Data Replication software configuration is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the udf_find_entry() function in the Linux operating system’s kernel allows a hacker to gain elevated privileges or cause service interruptions.

The vulnerability of the udffindentry function in the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

GHSA-84PP-QR92-95C9 Liferay Portal users can upload an unlimited amount of files

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the...

CVE-2025-55741: Improper Access Control

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. In versions 0.3.0 and earlier, users without the Delete privilege for products are unable to delete individual products via the standard endpoint, as expected. However, these users can bypass intend...

CVE-2010-20119 CommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer Overflow

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments method. This method fails to properly validate the length of input strings, allowing data to exceed th...

CVE-2010-20119

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments method. This method fails to properly validate the length of input strings, allowing data to exceed th...

CVE-2010-20119 CommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer Overflow

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments method. This method fails to properly validate the length of input strings, allowing data to exceed th...

CVE-2010-20119: Stack-based Buffer Overflow

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments method. This method fails to properly validate the length of input strings, allowing data to exceed th...

ROS-20250821-06

A vulnerability in the Perl programming language is related to the race condition if a directory descriptor is opened when the thread is created. Exploitation of the vulnerability could allow an attacker to interfere with the application's behavior...

CVE-2011-10020

Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become...

CVE-2025-4437 Cri-o: large /etc/passwd file may lead to denial of service

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...

The vulnerability of the gf_opus_parse_packet_header function in the MP4Box utility of the GPAC multimedia platform allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the gfopusparsepacketheader function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the gfmedia_map_esd function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gf-media-map-ESD function in the MP4Box utility of the GPAC multimedia platform is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the gf_cenc_set_pssh function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gfcencsetpssh function in the MP4Box utility of the GPAC multimedia platform involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...