85706 matches found
UBUNTU-CVE-2025-38701
In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINEDATAFL lacks system.data xattr A syzbot fuzzed image triggered a BUGON in ext4updateinlinedata when an inode had the INLINEDATAFL flag set but was missing the system.data extended attribute. Since this...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper validation of user input in the dataAppReportCodeid and dataAppReportCodename parameters within the /apprain/appreport/manage/ process. An attacker can execute arbitrary scripts in the context of a...
CVE-2025-41043 Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAppReportCodeid' and 'dataAppReportCodename' parameters in /apprain/appreport/manage/...
HID: core: ensure the allocated report buffer can contain the reserved report ID
...
HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
...
PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability
PHPGurukul Beauty Parlour Management System is an application from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.1 of the PHPGurukul Beauty Parlour Management System, which stems from improper manipulation of the parameter viewid in the file /admin/view-appointment.php, which...
PT-2025-35914
Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The vulnerability is triggered through the dataAppReportCodeid and dataAppReportCodename...
GNU Bison scan-code.c code_free double free
...
CVE-2025-9865
creationtimestamp| type| source ---|---|--- 2025-09-03 20:28:33+00:00| seen| https://gist.github.com/Darkcrai86/7c1e8139c5a81c9379b8425ee39f3e0f 2025-09-07 02:38:11+00:00| seen| https://bsky.app/profile/secqube.com/post/3ly7nv5esx32a...
CVE-2025-58639
creationtimestamp| type| source ---|---|--- 2025-09-03 17:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx6aqzl5g27...
Linux Distros Unpatched Vulnerability : CVE-2024-48898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permissi...
Akinsoft MyRezzta security vulnerability
Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta that stems from improperly limiting authentication attempts, and no detailed vulnerability details are available at this time...
Linux Distros Unpatched Vulnerability : CVE-2024-48901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit tha...
CVE-2025-9814
creationtimestamp| type| source ---|---|--- 2025-09-02 08:14:24+00:00| seen| https://gist.github.com/Darkcrai86/9f7a886fab0a7769deec46bf0820ede5...
Linux Distros Unpatched Vulnerability : CVE-2024-43438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned b...
Linux Distros Unpatched Vulnerability : CVE-2024-43434
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2025-30706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit...
Linux Distros Unpatched Vulnerability : CVE-2025-21171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET Remote Code Execution Vulnerability CVE-2025-21171 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...
CVE-2025-9702
A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /salesreport.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...