wifi: iwlwifi: fix debug actions order

...

CIRCL 数据伪造问题漏洞

CIRCL is a collection of cryptographic primitives written in Go open-sourced by Cloudflare. CIRCL suffers from a Data Forgery Issue vulnerability that stems from low-order point injection and improper point validation that could compromise session security...

kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtphidremove...

Linux Distros Unpatched Vulnerability : CVE-2025-37907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/ivpu: Fix locking order in ivpujobsubmit Fix deadlock in job submission and abort handling. When a thread aborts currently executing jobs due to a fault, ...

xorg-x11-server: XTestSwapFakeInput stack overflow

A vulnerability was found in X.Org. The issue occurs due to the swap handler for the XTestFakeInput request of the XTest extension, possibly corrupting the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This flaw can lead to local privilege...

kernel: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hidishtpclremove During the rmmod operation for the intelishtphid driver, a use-after-free issue can occur in the hidishtpclremove function. The function hidishtpcldeinit is called...

CVE-2025-52327

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...

Complete Evasion, Zero Modification: PDF Attacks on AI Text Detection

AI-generated text detectors have become essential tools for maintaining content authenticity, yet their robustness against evasion attacks remains questionable. We present PDFuzz, a novel attack that exploits the discrepancy between visual text layout and extraction order in PDF documents. Our...

SUSE CVE-2025-38424

In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs doexit Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways. The crash further shows perf trying to do a user...

CVE-2025-52327

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...

CVE-2025-52327

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...

PT-2025-31643 · Unknown · Restaurant Order System

Name of the Vulnerable Software and Affected Versions: Restaurant Order System version 1.0 Description: A SQL Injection issue exists in Restaurant Order System 1.0. A local attacker can obtain sensitive information via the payment.php file. Recommendations: At the moment, there is no information...

CVE-2025-52327

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...

Code-Projects Restaurant Order System 安全漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. A security vulnerability exists in Code-Projects Restaurant Order System version 1.0, which originates from a SQL injection vulnerability in the payment.php file, which may lead to the disclosure o...

CVE-2025-52327

CVE-2025-52327 affects Restaurant Order System 1.0. The issue is a SQL injection in payment.php that could let a local attacker obtain sensitive information. CVSSv3.1 metrics indicate local access, low attack complexity, and required privileges with high impact to confidentiality, integrity, and ...

CVE-2025-52327

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...

DEBIAN-CVE-2025-54572

The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the messagemaxbytesize setting configured. The vulnerability occurs because the SAML response is validated for Base64...

SUSE CVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written, potentially causing race conditions where the host sees an updated read...

AZL-65990 CVE-2025-7458 affecting package sqlite for versions less than 3.39.2-4

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...

DEBIAN-CVE-2025-7458

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...