CVE-2025-3212 Mali GPU Kernel Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.This issue...

ARM多款产品 安全漏洞

ARM Bifrost GPU Kernel Driver and others are a GPU kernel driver from ARM UK. A security vulnerability exists in various ARM products, which stems from a reuse-after-release issue that could result in out-of-bounds memory accesses. The following products and versions are affected: ARM Bifrost GPU...

PT-2025-36465

Name of the Vulnerable Software and Affected Versions: Arm Ltd Bifrost GPU Kernel Driver versions r41p0 through r49p4, and r50p0 through r51p0 Arm Ltd Valhall GPU Kernel Driver versions r41p0 through r49p4, and r50p0 through r54p0 Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver versions r41p0...

Code-Projects Fruit Shop Management System 安全漏洞

Code-Projects Fruit Shop Management System is a Code-Projects open source fruit store management system . A security vulnerability exists in Code-Projects Fruit Shop Management System version 1.0, which is caused by a cross-site scripting attack due to incorrect manipulation of the parameters...

Linux Distros Unpatched Vulnerability : CVE-2023-51791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxlparser.c in genaliasmap...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the SelectListByPage function in the GenTableDao.go file. An attacker can access or modify sensitive data, or disrupt application functionality by manipulating the isAsc or orderByColumn arguments in crafted requests...

CVE-2025-9410 lostvip-com ruoyi-go GenTableDao.go SelectListByPage sql injection

A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTableDao.go. Executing manipulation of the argument isAsc/orderByColumn can lead to sql injection. It is possible to launch the attack remotely...

CVE-2025-9410 lostvip-com ruoyi-go GenTableDao.go SelectListByPage sql injection

A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTableDao.go. Executing manipulation of the argument isAsc/orderByColumn can lead to sql injection. It is possible to launch the attack remotely...

HPESBHF04934 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processor BIOS, INTEL-SA-01310, Intel OOBM Services Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 -Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 -Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 -Prior to 1.4005-22-2025 H...

MAL-2025-6893 Malicious code in gen-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75651f44d228425603e123afc19ebe54f8701a76f7c4325cdb00545156df506a The OpenSSF Package Analysis project identified 'gen-studio' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in gen-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75651f44d228425603e123afc19ebe54f8701a76f7c4325cdb00545156df506a The OpenSSF Package Analysis project identified 'gen-studio' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

Linux Distros Unpatched Vulnerability : CVE-2022-50154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Fix refcount leak in mtkpcieinitirqdomains ofgetchildbyname returns a no...

Malicious code in hs-api-next-gen (npm)

The package hs-api-next-gen was found to contain malicious code...

MAL-2025-22741 Malicious code in hs-api-next-gen (npm)

The package hs-api-next-gen was found to contain malicious code...

Malicious code in @leaffm/automatically-gen-script (npm)

The package @leaffm/automatically-gen-script was found to contain malicious code...

Malicious code in graphql_swift_gen (npm)

The package graphqlswiftgen was found to contain malicious code...

MAL-2025-21889 Malicious code in graphql_java_gen (npm)

The package graphqljavagen was found to contain malicious code...

Malicious code in graphql_java_gen (npm)

The package graphqljavagen was found to contain malicious code...

HPESBHF04926 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01313, 2025.3 IPU, Intel Xeon Processor Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEas...

HPESBHF04912 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.4011-08-2024 HPE Alletra 4120 - Prior to 2.4011-08-2024 HPE Alletra 4140 - Prior to 2.4011-08-2024 HPE ProLiant DL110 Gen11 - Prior to...