DEBIAN-CVE-2025-39812

In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctpv6fromsk syzbot found that sin6scopeid was not properly initialized, leading to undefined behavior. Clear sin6scopeid and sin6flowinfo. BUG: KMSAN: uninit-value in sctpv6cmpaddr+0x887/0x8c0...

SQL Injection Vulnerability in Safi OA System

Safe OA system is an office system developed by ASP.NET, and customers involved in medicine, finance, schools, administration and many other units. There is a SQL injection vulnerability in Safi OA system, because the ID parameter of the /ArchiveSend/GetArchiveFlowInfo.aspx page fails to filter t...