CVE-2025-59436

creationtimestamp| type| source ---|---|--- 2025-09-16 05:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lywkgj4vif2a...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of bounds checking in the mtreportfixup function, which could lead to out-of-bounds access...

PT-2025-38006

Name of the Vulnerable Software and Affected Versions: ATSMS web application affected versions not specified Description: A cross-site scripting XSS issue exists in the search-autootaxi.php endpoint of the ATSMS web application. The application does not properly sanitize user input submitted...

CVE-2025-57145

A cross-site scripting XSS vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the...

CVE-2025-57145

A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS (PHPGurukul Auto Taxi Stand Management System) web application. The root cause is a failure to properly sanitize user input submitted through a form field, which allows an attacker to inject arbitr...

CVE-2025-57145

A cross-site scripting XSS vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the...

Linkr security vulnerabilities

Linkr is a file transfer system by the individual developer Mohammad Zain. A security vulnerability exists in Linkr version 2.0.0 and earlier, which stems from failure to validate the integrity and authenticity of .linkr manifest files, and could lead to arbitrary file injection and remote code...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value CVE-2022-50327 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps CVE-2024-49861 In the Linux...

Mozilla -- spoofing

[email protected] reports: Spoofing issue in the Site Permission component...

Firefox -- Integer overflow in the SVG component

https://bugzilla.mozilla.org/showbug.cgi?id=1980788 reports: Integer overflow in the SVG component...

How Companies Are Balancing AI Innovation with Risk

A new Forrester report, commissioned by Akamai, reveals how companies are pursuing AI innovation at scale without exposure to unacceptable levels of risk...

Missing Report of Error Condition

Overview Affected versions of this package are vulnerable to Missing Report of Error Condition via the ChargePoint::messagecallback function. An attacker can cause a crash by submitting JSON input exceeding 255 characters, which triggers an exception due to the StringTooLarge parameter being set ...

CVE-2022-50330

In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The "codelength" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect yourself. Still we tr...

CVE-2022-50313

Summary: CVE-2022-50313 affects the Linux kernel (EROF S subsystem). The root cause is that the i_size field is signed; crafted negative i_size can be interpreted as a fast symlink, triggering an order = MAX_ORDER warning. The fix changes the handling to fall back to the generic path for such unu...

CVE-2023-53186

creationtimestamp| type| source ---|---|--- 2025-09-15 14:45:44+00:00| seen| https://gist.github.com/Darkcrai86/64fb5bf5d6c6621f71f5416b13e99774...

CVE-2025-10425: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/studentcontroller.php. Such manipulation of the argument newimage leads to unrestricted upload. The attack m...

1000 Projects Online Student Project Report: Code Issues and Vulnerabilities

1000 Projects Online Student Project Report is an open source online student project reporting system from 1000 Projects. A code issue vulnerability exists in version 1.0 of 1000 Projects Online Student Project Report, which stems from an incorrect manipulation of the parameter newimage in the fi...

1000 Projects Online Student Project Report: Code Issues and Vulnerabilities

1000 Projects Online Student Project Report is an online student project reporting system from 1000 Projects open source. A code issue vulnerability exists in 1000 Projects Online Student Project Report Submission and Evaluation System version 1.0, which originates from an incorrect operation of...

CVE-2025-10424: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/facultycontroller.php. This manipulation of the argument newimage causes unrestricted upload. The attack is...

gadgetinspector

This is a Java-based tool for finding deserialization gadget chains in Java applications. The tool is called "Gadget Inspector" and is presented as a project that was showcased at Black Hat USA 2018. The tool is designed to automatically discover possible gadget chains in an application's...