CVE-2025-40923 Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely

Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if i...

CVE-2025-40923: Generation of Predictable Numbers or Identifiers

Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if i...

kernel: Squashfs: fix handling and sanity checking of xattr_ids count

In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem exposes two flaws in the handling and sanity checking of the xattrids count in the filesystem. Both of these flaws cause computation...

kernel: Squashfs: fix handling and sanity checking of xattr_ids count

In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem exposes two flaws in the handling and sanity checking of the xattrids count in the filesystem. Both of these flaws cause computation...

[SECURITY] [DLA 4239-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4239-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk July 11, 2025 https://wiki.debian.org/LTS -...

Hash Collision Attack

llamaindex is vulnerable to Hash Collision Attack. The vulnerability is due to the use of MD5 hashing for generating document chunk IDs, which allows an attacker to exploit hash collisions by creating structurally distinct chunks with identical text...

CVE-2025-7156

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-7156

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-7156

The CVE-2025-7156 entry concerns hitsz-ids airda 0.0.3. The vulnerable element is the execute function in /v1/chat/completions, where manipulating the question parameter triggers an SQL injection. This is exploitable remotely and has public disclosure. Multiple connected sources corroborate the i...

CVE-2025-7156 hitsz-ids airda completions execute sql injection

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-7156 hitsz-ids airda completions execute sql injection

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-28306 · Unknown · Hitsz-Ids Airda

Name of the Vulnerable Software and Affected Versions: hitzs-ids airda version 0.0.3 Description: A critical vulnerability exists in the execute function of the /v1/chat/completions file. Manipulation of the question argument results in SQL injection. The attack can be initiated remotely. The...

hitsz-ids airda 注入漏洞

hitsz-ids airda is an open source multi-intelligence for data analytics by China's HITZ Shenzhen Data Security Research Institute hitsz-ids. An injection vulnerability exists in hitsz-ids airda version 0.0.3, which stems from SQL injection due to incorrect manipulation of the parameter question i...

CVE-2025-7156: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been...

Debian dsa-5959 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5959 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5959-1 [email protected] https://www.debian.org/securit...

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

CVE-2025-52993

A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...

[SECURITY] [DLA 4231-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4231-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort June 26, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5950-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5950-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 25, 2025 https://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-7588-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...