CVE-2025-56605

A reflected Cross-Site Scripting XSS vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute...

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHCP Event Management is an application developed by Puneeth Reddy H C as a personal developer. It helps users register for events held during university festivals in a simple and secure manner. Version 1.0 of PuneethReddyHCP Event Management contains a security vulnerability. This...

CVE-2025-56605

A reflected Cross-Site Scripting XSS vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute...

CVE-2026-25733

creationtimestamp| type| source ---|---|--- 2026-02-25 21:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpnzvo64f2y 2026-02-28 07:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfvnnxangu2e...

EUVD-2025-208118

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under...

CVE-2025-14511

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under...

CVE-2026-25997

creationtimestamp| type| source ---|---|--- 2026-02-25 21:16:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpm3qszfn2e 2026-02-28 12:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfw6goublm2h...

CVE-2025-14511

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under...

UBUNTU-CVE-2025-14511

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under...

CVE-2025-14511

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under...

CVE-2025-14511

Removed by vendor...

CVE-2025-14511 Improper Validation of Specified Quantity in Input in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted files to the container registry event endpoint under...

GHSA-49GM-HH7W-WFVF

creationtimestamp| type| source ---|---|--- 2026-02-25 16:40:18+00:00| seen| https://gist.github.com/alon710/5a98ccf5e002241a9fed9bd171aac6d2 2026-06-29 13:27:42+00:00| seen| https://gist.github.com/zSarix/66a6804b1056cbaf4c2940b8f9808613...

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-24491: heap-use-after-free in videotimer bsc1257981. CVE-2026-24675: heap-use-after-free in urbselectinterface bsc1257982. CVE-2026-24676: heap-use-after-free in audioformatcompatible bsc1257983. CVE-2026-24679: heap-buffer-overflow in...

GHSA-8VRH-3PM2-V4V6

creationtimestamp| type| source ---|---|--- 2026-02-25 16:10:19+00:00| seen| https://gist.github.com/alon710/e8bd93f4619202bc0c1f669862922839...

kernel: Linux kernel: xHCI driver isochronous event handling race condition leading to data loss or UAF

A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface driver. This vulnerability allows data loss or buffer Use-After-Free UAF due to a race condition during isochronous Ring Underrun/Overrun event handling...

CVE-2025-14103

creationtimestamp| type| source ---|---|--- 2026-02-25 13:10:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfoqwufv6l2q 2026-02-25 21:26:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpmntuxkt2n...

GHSA-HHFX-5X8J-F5F6

creationtimestamp| type| source ---|---|--- 2026-02-25 04:40:18+00:00| seen| https://gist.github.com/alon710/1f5269447a1894adbb81b93906c7462d...

CVE-2026-3043

A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and...

CVE-2026-3042

A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...