3131 matches found
grpo-flat 代码问题漏洞
grpo-flat is a tool for training grpo using zero dataset and low resources by XU-YIJIE personal developer. A code issue vulnerability exists in grpo-flat that stems from improper handling of the function main in the file grpovanilla.py, which could lead to a deserialization attack...
The vulnerability of the ssdpcgi_main function in the binary file cgibin of D-Link DIR-815 router microprogramming software, allowing a hacker to execute any command they desire.
The vulnerability of the ssdpcgimain function in the binary file cgibin of D-Link DIR-815 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
itsourcecode Content Management System 安全漏洞
itsourcecode Content Management System is a content management system of itsourcecode open source. A security vulnerability exists in version 1.0 of itsourcecode Content Management System, which originates from improper manipulation of the parameter stopicid in the file...
UBUNTU-CVE-2024-58100
In the Linux kernel, the following vulnerability has been resolved: bpf: check changespktdata property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changespktdata property of the...
The vulnerability of the main() function in NETGEAR R6100 integrated routing software allows a hacker to execute arbitrary code.
The vulnerability of the main function in NETGEAR R6100 integrated routing software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using the QUERYSTRING parameter...
Allocation of File Descriptors or Handles Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of File Descriptors or Handles Without Limits or Throttling due to the manipulation of the File argument in the main function of the file examples/LOP/src/genRandomLOPInstance.c. An attacker can cause uncontrolled file...
CVE-2025-4001: DEPRECATED: Uncontrolled File Descriptor Consumption
A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandomLOPInstance.c of the component File Descriptor Handler. The manipulation of the argument File leads to uncontrolled...
opencms 安全漏洞
opencms is a CMS system of fumiao individual developer. A security vulnerability exists in opencms V2.3, which originates from the file src/main/webapp/view/admin/document/dataPage.jsp being read by an arbitrary file...
CVE-2025-28099: Improper Limitation of a Pathname to a Restricted Directory
opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...
CVE-2025-3763: Buffer Copy without Checking Size of Input
A vulnerability classified as critical has been found in SourceCodester Phone Management System 1.0. This affects the function main of the component Password Handler. The manipulation of the argument s leads to buffer overflow. Local access is required to approach this attack. The exploit has bee...
The vulnerability of the enic_main.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the enicmain.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the i40e_main.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the i40emain.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-3318: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in KenjFrog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function page of the file src/main/java/com/controller/ShangpinleixingController.java. The manipulation of the argument sort leads to sql injection. T...
The vulnerability of the kernel_init_freeable() function in the init/main.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the kernelinitfreeable function in the init/main.c module of Linux kernels relates to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
PT-2025-37375
Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.30 Description Chamilo is a learning management system. A flaw exists due to a failure to neutralize special elements used in an OS command. Successful exploitation could allow a remote attacker to execute...
MAL-2025-2903 Malicious code in tapbit-main (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tapbit-main (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hibt-main (npm)
--- -= Per source details. Do not edit below this line.=-...