CVE-2019-25455

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability exploitable by unauthenticated attackers via the a parameter in ara.html. Attackers can manipulate database queries through crafted GET requests to extract sensitive information. The CVE specifies high impact with confidentiality leak...

PT-2026-20863

Name of the Vulnerable Software and Affected Versions CDATA FD614GS3-R850 version 3.2.7 P161006 Build.0333.250211 Description A buffer overflow issue exists in CDATA FD614GS3-R850 version 3.2.7 P161006 Build.0333.250211. This flaw allows an attacker to potentially execute arbitrary code by...

CVE-2019-25346

TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'servername' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information...

CVE-2026-2162

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

libheif:file_fuzzer: Negative-size-param in HeifPixelImage::fill_RGB_16bit

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4818214004785152 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

PT-2026-6534

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478035120 Crash type: Memcpy-param-overlap Crash state: grk::memStreamRead grk::BufferedStream::read grk::MarkerParser::readSOTorEOC...

grok:grk_decompress_fuzzer: Memcpy-param-overlap in grk::memStreamRead

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5626836959952896 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

pcapplusplus:FuzzTarget: Negative-size-param in pcpp::RawPacket::insertData

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5059739276083200 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

VulnCheck KEV: CVE-2025-7081

A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the file /goform/formSetWanStatic of the component webs. The manipulation of the argument...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004926 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Init jump labels before parseearlyparam On 64-bit, calling jumplabelinit in...

libheif:file_fuzzer: Negative-size-param in HeifPixelImage::fill_RGB_16bit

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4782198220980224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

CVE-2026-1120

A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/delwork.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

qemu:qemu-fuzz-i386-target-generic-fuzz-rtl8139: Memcpy-param-overlap in libslirp.so.0

Detailed Report: https://oss-fuzz.com/testcase?key=5011873676525568 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-rtl8139 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x51b000003220,0x51b000003640 and...

cairo:svg-render-fuzzer: Negative-size-param in _blit_xrgb32_lerp_spans

Detailed Report: https://oss-fuzz.com/testcase?key=4806969277087744 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: svg-render-fuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: blitxrgb32lerpspans cairotorscanconvertergenerate...

CVE-2021-41739

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993115 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Init jump labels before parseearlyparam On 64-bit, calling jumplabelinit in...

CVE-2022-50814

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sglsgenr KASAN reported this Bug: 17619.659757 BUG: KASAN: global-out-of-bounds in paramgetint+0x34/0x60 17619.673193 Read of size 4 at addr fffff01332d7ed00 by task readall/1507958...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992483 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Init jump labels before parseearlyparam On 64-bit, calling jumplabelinit in...

EUVD-2025-205659

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.parameval...

CVE-2025-15192 D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection

A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub415328 of the file /boafrm/formLtefotaUpgradeQuectel. Such manipulation of the argument fotaurl leads to command injection. The attack can be executed remotely. The exploit has been...