CVE-2025-64482 Tuleap missing CSRF protections in the File Release System

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9 don't have cross-site request forgery protections in the file...

CVE-2025-11032

CVE-2025-11032 affects kidaze CourseSelectionSystem (pre-42cd892b40a18d50bd4ed1905fa89f939173a464). The flaw stems from improper handling of the CPU argument in /Profilers/PriProfile/COUNT3s6.php, enabling remote, network-based SQL injection with no required privileges or user interaction. Exploi...

CVE-2025-9805 SimStudioAI sim route.ts server-side request forgery

A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2. This issue affects some unknown processing of the file apps/sim/app/api/proxy/image/route.ts. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit...

CVE-2022-50035

CVE-2022-50035 affects the Linux kernel DRM AMDGPU path. The issue is a use-after-free in amdgpu_bo_list mutex handling caused by double-unlocking of bo_list_mutex when amdgpu_cs_vm_handling returns non-zero, which can lead to a refcount underflow (as shown in the trace). The vulnerability is dem...

SUSE-SU-2022:1829-1 Security update for go1.18

This update for go1.18 fixes the following issues: - CVE-2022-29526: Fixed faccessat system call operation that checked the wrong group bsc1199413. - go1.18.2 released 2022-05-10 bsc1193742...

File Upload Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability. An arbitrary file upload vulnerability exists in the Flash Flood Detection and Early Warning Platform of Sicron Technology Limited, which allows an attacker to upload an aspx file to gain access to the...

Unauthorized Access Vulnerability in Qinghan Technology QH-S302 Terminal Display Device

Qinghan Technology QH-S302 terminal display device is the terminal part of the information release system. An unauthorized access vulnerability exists in the QH-S302 terminal display device, which can be exploited by an attacker to obtain sensitive information...

Container theft, the legal system and poor maritime security

One of the most interesting legal cases I’ve read recently involves a theft of two containers of cobalt metal briquettes from a terminal at the port of Antwerp. Original judgment: Appeal: What drew me to this case was the amount of useful data that had entered the public domain concerning a crime...

南大之星信息发布系统 search_video.asp等6处 SQL注入漏洞

No description provided by source...

Multiple SQL Injection Vulnerabilities in Absolut Engine

Absolut Engine is a press release system. Absolut Engine has multiple SQL injection vulnerabilities. Due to the program failing to adequately filter user-supplied input. An attacker could exploit the vulnerabilities to compromise the application and access or modify data...