PT-2025-49373

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s handling of page faults within secret memory files created using memfd secret2. Concurrent page faults in the same page by multiple tasks can lead to ...

CVE-2025-49148

ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileg...

PT-2025-25225 · Clipshare · Clipshare

Name of the Vulnerable Software and Affected Versions: ClipShare versions prior to 3.8.5 Description: ClipShare is a lightweight and cross-platform tool for clipboard sharing. The issue arises because ClipShare Server for Windows uses the default Windows DLL search order, loading system libraries...

ClipShare 代码问题漏洞

ClipShare is a cross-device shared clipboard by Thevindu Wijesekera Individual Developer. A code issue vulnerability exists in ClipShare versions prior to 3.8.5, which stems from a DLL being loaded in the wrong order, and may result in local elevation of privilege...

CVE-2025-5980

A vulnerability classified as critical was found in code-projects Restaurant Order System 1.0. This vulnerability affects unknown code of the file /order.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-5980

A vulnerability classified as critical was found in code-projects Restaurant Order System 1.0. This vulnerability affects unknown code of the file /order.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-5980 code-projects Restaurant Order System order.php sql injection

A vulnerability classified as critical was found in code-projects Restaurant Order System 1.0. This vulnerability affects unknown code of the file /order.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-5980 code-projects Restaurant Order System order.php sql injection

A vulnerability classified as critical was found in code-projects Restaurant Order System 1.0. This vulnerability affects unknown code of the file /order.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-5980

The CVE-2025-5980 entry concerns code-projects Restaurant Order System 1.0. The /order.php endpoint is vulnerable via the tabidNoti parameter, enabling SQL injection. Attacks can be initiated remotely and exploit information has been publicly disclosed. Connected records corroborate the injection...

BIT-MARIADB-MIN-2021-46657

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is Code-Projects open source a restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability, which originates from the incorrect operation of the parameter tabidNoti in the file /order.php, resulting in S...

OpenAI forced to preserve ChatGPT chats

OpenAI has protested a court order that forces it to retain its users' conversations. The creator of the ChatGPT AI model objected to the order, which is part of a copyright infringement case against it by The New York Times and other publishers. The news organizations argued that ChatGPT was...

WordPress plugin Custom Category/Post Type Post order security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-27688

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A concurrency-related issue in the Linux kernel has been resolved. The problem was related to buffer locking in the ring buffer subbuf order set function. To fix this, the critical...

[SECURITY] Fedora 41 Update: rust-hashlink-0.10.0-1.fc41

HashMap-like containers that hold their key-value pairs in a user controllable order...

Security update for grub2

This update for grub2 fixes the following issues: Security fixes: CVE-2025-4382: exposure of data from encrypted device through CLI once the root device is successfully unlocked via TPM bsc1242971. Other bug fixes: Fix incorrect nvme disks and boot order in bootlist output bsc1237174. Special...

SUSE-SU-2025:01747-1 Security update for grub2

This update for grub2 fixes the following issues: Security fixes: - CVE-2025-4382: exposure of data from encrypted device through CLI once the root device is successfully unlocked via TPM bsc1242971. Other bug fixes: - Fix incorrect nvme disks and boot order in bootlist output bsc1237174...

SUSE-SU-2025:01464-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-43965: Fixed mishandling of image depth after SetQuantumFormat is used in MIFF image processing. bsc1241659 - CVE-2025-46393: Fixed mishandling of packetsize leads to rendering of channels in arbitrary order in multispectral MIFF...

CVE-2025-5299

A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /userordercustomerupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attack ca...

WordPress Order Delivery Date Missing Authorization

WordPress Order Delivery Date plugin versions prior to 12.3.1 have missing authorization and cross site request forgery vulnerabilities surrounding the importing of settings...