drm/amdgpu: Skip do PCI error slot reset during RAS recovery

...

scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths

...

scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

...

soc: qcom: pdr: protect locator_addr with the main mutex

...

reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC

...

dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn

...

CVE-2024-48705

Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...

PT-2025-39133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to network device drivers. Specifically, the fec enet phy reset after clk enable function may experience a null pointer dereference NPD if of ph...

PT-2025-36611

Impact An unauthenticated attacker with access to the back-office URL can manipulate the id employee and reset token parameters to enumerate valid back-office employee email addresses. Impacted parties: Store administrators and employees: their email addresses are exposed. Merchants: risk of...

PT-2025-35900

Name of the Vulnerable Software and Affected Versions: PopAd plugin for WordPress versions prior to 1.0.5 Description: The PopAd plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation in the PopAd reset cookie time function. This allows...

PT-2025-36085

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A missing permission check in FrpBypassAlertActivity of FrpBypassAlertActivity.java may allow bypass of Factory Reset Protection FRP. This could lead to local privilege escalation without...

PT-2025-36088

Name of the Vulnerable Software and Affected Versions: SystemSettingsFragment.java affected versions not specified Description: A logic error exists in the initPhoneSwitch function within SystemSettingsFragment.java. This issue may lead to a Factory Reset Protection FRP bypass, potentially...

PT-2025-36483

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.2.1 PrestaShop version 8.2.2 PrestaShop version 8.2.3 Description: An issue exists in the controllers/admin/AdminLoginController.php file that allows attackers to gain sensitive information via the password rese...

wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850

...

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

CVE-2025-57146: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

CVE-2025-57146

The phpgurukul Complaint Management System in PHP version 2.0 is vulnerable to SQL Injection in the user/reset-password.php file. The root cause is a lack of validation for externally entered SQL statements provided via the mobileno parameter. An attacker could exploit this flaw to execute unauth...

PT-2025-35778

Name of the Vulnerable Software and Affected Versions: phpgurukul Complaint Management System in PHP version 2.0 Description: The phpgurukul Complaint Management System in PHP is susceptible to SQL Injection. The vulnerability is located in the user/reset-password.php file and can be triggered...