Lucene search
+L

3357 matches found

Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.15 views

PT-2025-51659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ksmbd module where a socket is leaked when the per-IP connection limit is exceeded during connection attempts. Specifically, when ksmbd kthread fn...

5.3AI score0.00414EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-68246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbdkthreadfn, the code sets ret = -EAGAIN an...

7.5CVSS5.7AI score0.00414EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/12/15 2:06 a.m.13 views

rsync: Path traversal vulnerability in rsync

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the --inc-recursive option, a lack of proper...

7.5CVSS5.9AI score0.02307EPSS
SaveExploits1References5
CNVD
CNVD
added 2025/12/15 12:00 a.m.17 views

Employee Profile Management System edit_personnel.php File SQL Injection Vulnerability

Employee Profile Management System is an employee profile management system. The Employee Profile Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter perid in the file editpersonnel.php. An...

9.8CVSS8.3AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/10 8:34 a.m.9 views

CVE-2023-53790

In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf memory allocator Currently the freed element in bpf memory allocator may be immediately reused, for htab map the reuse will reinitialize special fields in map value e.g., bpfspinlock...

5.5CVSS5.9AI score0.00151EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/10 4:54 a.m.19 views

CVE-2023-53810

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

4.5CVSS5.2AI score0.00142EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/10 12:39 a.m.13 views

SUSE CVE-2022-50646

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsainitone The hpdaallocctlrinfo allocates h and its field replymap. However, in hpsainitone, if allocpercpu failed, the hpsainitone jumps to clean1 directly, which frees h and leaks the...

3.3CVSS6.5AI score0.00205EPSS
SaveExploits0References10
CNVD
CNVD
added 2025/12/10 12:00 a.m.15 views

Employee Profile Management System /view_personnel.php File Cross-Site Scripting Vulnerability

Employee Profile Management System is an employee profile management system. Employee Profile Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter peraddress/drschool/otherschool in...

5.4CVSS4.4AI score0.00256EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/12/10 12:00 a.m.19 views

Employee Profile Management System print_personnel_report.php File SQL Injection Vulnerability

Employee Profile Management System is an employee profile management system. An SQL injection vulnerability exists in Employee Profile Management System, which stems from the lack of validation of externally entered SQL statements in the parameter perid in the file /printpersonnelreport.php. An...

8.8CVSS7.2AI score0.00308EPSS
SaveExploits1References1
HackRead
HackRead
added 2025/12/09 9:45 p.m.14 views

The Dark Web Economy Behind Ad Fraud: What Marketers Don’t See

Ad fraud networks use bots, deepfakes and spoofed traffic to drain PPC budgets. This report shows how fake clicks distort performance data...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/09 5:27 p.m.12 views

CVE-2025-48584

In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.2AI score0.00093EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 3:31 a.m.8 views

EUVD-2023-60096

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

5.8AI score0.00142EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/09 3:31 a.m.13 views

EUVD-2023-60116

In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf memory allocator Currently the freed element in bpf memory allocator may be immediately reused, for htab map the reuse will reinitialize special fields in map value e.g., bpfspinlock...

6AI score0.00151EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/09 1:16 a.m.22 views

CVE-2025-14285

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

9.8CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/09 1:16 a.m.13 views

UBUNTU-CVE-2023-53810

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

7.8CVSS5.7AI score0.00142EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/12/09 1:02 a.m.12 views

EUVD-2025-201842

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS6.5AI score0.00387EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/12/09 1:02 a.m.7 views

CVE-2025-14285 code-projects Employee Profile Management System edit_personnel.php sql injection

A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpersonnel.php. The manipulation of the argument perid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be use...

7.5CVSS6.8AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/09 1:02 a.m.24 views

CVE-2025-14285

Code-projects Employee Profile Management System 1.0 is affected by a SQL injection in edit_personnel.php via the per_id parameter. The flaw enables remote exploitation and has publicly available exploits; multiple sources corroborate the issue. There is no product-specific patch details in the p...

9.8CVSS6.8AI score0.00387EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2025/12/09 12:01 a.m.16 views

CVE-2023-53810

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

7.8CVSS5.5AI score0.00142EPSS
SaveExploits0
OSV
OSV
added 2025/12/09 12:01 a.m.10 views

CVE-2023-53810 blk-mq: release crypto keyslot before reporting I/O complete

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...

7.8CVSS6.3AI score
SaveExploits0References9
Rows per page
Query Builder