Lucene search
+L

2986 matches found

CNVD
CNVD
added 2025/12/10 12:0 a.m.6 views

Employee Profile Management System print_personnel_report.php File SQL Injection Vulnerability

Employee Profile Management System is an employee profile management system. An SQL injection vulnerability exists in Employee Profile Management System, which stems from the lack of validation of externally entered SQL statements in the parameter perid in the file /printpersonnelreport.php. An...

8.8CVSS7.2AI score0.00276EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/12/10 12:0 a.m.7 views

Employee Profile Management System /view_personnel.php File Cross-Site Scripting Vulnerability

Employee Profile Management System is an employee profile management system. Employee Profile Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter peraddress/drschool/otherschool in...

5.4CVSS4.4AI score0.00223EPSS
SaveExploits1References1
HackRead
HackRead
added 2025/12/09 9:45 p.m.7 views

The Dark Web Economy Behind Ad Fraud: What Marketers Don’t See

Ad fraud networks use bots, deepfakes and spoofed traffic to drain PPC budgets. This report shows how fake clicks distort performance data...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/09 5:27 p.m.7 views

CVE-2025-48584

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.2AI score0.00085EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 3:31 a.m.6 views

EUVD-2023-60096

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

5.8AI score0.00171EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/09 3:31 a.m.8 views

EUVD-2023-60116

In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf memory allocator Currently the freed element in bpf memory allocator may be immediately reused, for htab map the reuse will reinitialize special fields in map value e.g., bpfspinlock...

6AI score0.00172EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/09 1:16 a.m.11 views

CVE-2025-14285

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

9.8CVSS0.00339EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/09 1:16 a.m.9 views

UBUNTU-CVE-2023-53810

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

5.7AI score0.00171EPSS
SaveExploits0References9
CVE
CVE
added 2025/12/09 1:2 a.m.15 views

CVE-2025-14285

Code-projects Employee Profile Management System 1.0 is affected by a SQL injection in edit_personnel.php via the per_id parameter. The flaw enables remote exploitation and has publicly available exploits; multiple sources corroborate the issue. There is no product-specific patch details in the p...

9.8CVSS6.8AI score0.00339EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 1:2 a.m.4 views

CVE-2025-14285 code-projects Employee Profile Management System edit_personnel.php sql injection

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS6.8AI score0.00339EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/09 1:2 a.m.8 views

EUVD-2025-201842

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS6.5AI score0.00339EPSS
SaveExploits1References6
OSV
OSV
added 2025/12/09 12:1 a.m.7 views

CVE-2023-53810 blk-mq: release crypto keyslot before reporting I/O complete

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

6.3AI score0.00171EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/12/09 12:1 a.m.7 views

CVE-2023-53810

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

5.5AI score0.00171EPSS
SaveExploits0
CVE
CVE
added 2025/12/09 12:0 a.m.35 views

CVE-2022-50646

CVE-2022-50646 affects the Linux kernel SCSI HPSA path. The vulnerability is due to a memory leak in hpsa_init_one() where, on alloc_percpu() failure, the code frees the allocated structure but leaks h->reply_map. The patch fixes this by calling hpda_free_ctlr_info() to release h->reply_map...

6.1AI score0.00179EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.12 views

PT-2025-49670

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blk crypto key has completed, filesystems can call blk crypto evict key. However, the block layer currently doesn't call blk crypto put keyslot unt...

6.3AI score0.00171EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/08 6:30 p.m.9 views

EUVD-2025-201770

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.7AI score0.00085EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/08 5:16 p.m.8 views

CVE-2025-48584

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.00085EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/08 4:57 p.m.27 views

CVE-2025-48584

CVE-2025-48584 affects the Android Framework via NotificationManagerService.java, where a method can bypass per-package channel limits, enabling local DoS through resource exhaustion without user interaction. The issue is documented across multiple feeds (NVD/Red Hat/ENISA/OSV) and is categorized...

5.5CVSS5.8AI score0.00085EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/08 4:57 p.m.28 views

CVE-2025-48584

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00085EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/08 4:57 p.m.7 views

CVE-2025-48584

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score0.00085EPSS
SaveExploits0References2
Rows per page
Query Builder