CVE-2020-25273

CVE-2020-25273 Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection. Vendor - SourceCodester Product -https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html V 1.0...

CVE_Project

CVEProject Preparations for exploitation: 1.Install Tomcat 7 on the virtual machine sudo apt-get install tomcat7 2.If the first step is failed,set JDKDIRS="/usr/lib/jvm/java-8-oracle" and add the statements “export JAVAHOME=/usr/lib/jvm/java-8-oracle” and “export CATALINAHOME=/usr/share/tomcat7”...

CVE-2026-108960

A vulnerability exists in Tiiny-AI PowerInfer (up to commit 8bd56d69906c9d2dba4d3bf6899763401e01a9a4) within the FFN GPU-split Loader component. Specifically, the create_striped_mat_to_gpu function in the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu is susceptible to an out-of-bounds read . ...

CVE-2026-108960 Tiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bounds

A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function createstripedmattogpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split Loader. The manipulation results in out-of-bounds read. The...

CVE-2026-108947

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...

Blackash-CVE-2025-32463

CVE-2025-32463 Local Privilege Escalation to Root via Sudo chroot in Linux 🛑 Here's a summary of CVE-2025-32463 without links: 🔍 Vulnerability Overview CVE-2025-32463 is a local privilege escalation vulnerability in Sudo versions 1.9.14 through 1.9.17. It abuses the --chroot -R option by...

CVE-2026-108944

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

CVE-2026-108945

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-108947

A deserialization vulnerability exists in yoshitomo-matsubara torchdistill versions up to 1.1.5 . The flaw is located within the load_ckpt function in the torchdistill/common/main_util.py file. An attacker can trigger deserialization by manipulating the src_ckpt argument. This attack requires loc...

CVE-2026-108947 yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...

CVE-2026-108947

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...

CVE-2026-108945 iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-108945 iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

EUVD-2026-98204

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

EUVD-2026-98168

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

EUVD-2026-98086

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

EUVD-2026-98179

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-108944

The RAE repository is vulnerable to a code injection flaw within the Config-Driven Model Instantiation component. Specifically, the get_obj_from_str function in src/utils/model_utils.py allows for code injection when the Target argument is manipulated. This vulnerability requires local access to ...

CVE-2026-108944 repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...