CVE-2025-14188

A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handlerfilebackupcreate of the file /v1/file/backup/create of the component nassvr. The manipulation of the argument path leads to command injection. The attack is possible to be carried out...

CVE-2025-14187

A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handlerfilebackupcreate of the file /v1/file/backup/create of the component nassvr. Executing a manipulation of the argument path can lead to buffer overflow. The attack can be executed remotely. The...

CVE-2025-14221

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-14185

A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/AppServletService.class. Such manipulation of the argument usercode leads to sql injection. The attack may be launched remotely. The explo...

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

EUVD-2025-201617

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

Vulnerability of the `btc_fw_set_monreg()` function in the `drivers/net/wireless/realtek/rtw89/coex.c` module – This driver is a Realtek wireless adapter support driver for the Linux operating system. It allows a hacker to cause a service failure.

Vulnerability of the btcfwsetmonreg function in the drivers/net/wireless/realtek/rtw89/coex.c module – The Realtek wireless adapter support driver for the Linux operating system is vulnerable due to a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the init_f2fs_fs() function in the fs/f2fs/super.c module of the F2FS file system support module in Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the initf2fsfs function in the fs/f2fs/super.c module of the F2FS file system support module in Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Vulnerability of the acpi_quirk_skip_serdev Enumeration() function in the drivers/acpi/x86/utils.c file – The ACPI support driver for the Linux kernel’s operating system allows a hacker to trigger a service failure.

Vulnerability of the acpiquirkskipserdev Enumeration function in the drivers/acpi/x86/utils.c module – The ACPI support driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the xe_gt_init_early() function in the drivers/gpu/drm/xe/xe_gt.c module – The DRI driver for Linux kernel’s direct rendering infrastructure allows a hacker to trigger a service failure.

Vulnerability of the xegtinitearly function in the drivers/gpu/drm/xe/xegt.c module – The driver for Linux’s Direct Rendering Infrastructure DRI relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mptcp_pernet_set_defaults() function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the mptcppernetsetdefaults function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a service failure...

Vulnerability of the mlx5_ib_dev_res_init() function in the drivers/infiniband/hw/mlx5/main.c module – This driver is part of the Linux operating system’s InfiniBand support mechanism, which allows a hacker to cause a service failure.

Vulnerability of the mlx5ibdevresinit function in the drivers/infiniband/hw/mlx5/main.c module – The Linux kernel’s InfiniBand driver relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important: linux-firmware

Issue Overview: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. CVE-2025-54514 Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence...

PT-2025-49420

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file...

The vulnerability of the copy_verifier_state() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the copyverifierstate function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the kunit_device_driver_test() function in the lib/kunit/kunit-test.c module allows a hacker to cause a service failure in Linux kernel-based module tests.

The vulnerability of the kunitdevicedrivertest function in the lib/kunit/kunit-test.c module, which is used for testing kernel module tests in Linux operating systems, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from direct manipulation of shared memory, which could lead to information disclosure or integrity corruption...

The vulnerability of the `create_sdw_dailink()` function in the `sound/soc/intel/boards/sof_sdw.c` file of the processor support subsystem on the SoC, as well as portable audio decoders in the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the createsdwdailink function in the sound/soc/intel/boards/sofsdw.c file, a part of the SoC support subsystem and used for portable audio decoders in the Linux operating system’s kernel, is related to pointer manipulation. Exploiting this vulnerability could allow an attacke...

The vulnerability of the vmap_udmabuf() function in the drivers/dma-buf/udmabuf.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vmapudmabuf function in the drivers/dma-buf/udmabuf.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...