wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

...

SUSE CVE-2025-39849

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is more than IEEE80211MAXSSIDLEN 32 it would lead to memory corruption so add some bounds checking...

CVE-2025-10603

A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/adminforum/searchresult.php. Executing manipulation of the argument Search can lead to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-39849

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is more than IEEE80211MAXSSIDLEN 32 it would lead to memory corruption so add some bounds checking...

UBUNTU-CVE-2025-39849

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is more than IEEE80211MAXSSIDLEN 32 it would lead to memory corruption so add some bounds checking...

CVE-2025-39849 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in cfg80211connectresult If the ssid-datalen is more than IEEE80211MAXSSIDLEN 32 it would lead to memory corruption so add some bounds checking...

CVE-2023-53384

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: avoid possible NULL skb pointer dereference In 'mwifiexhandleuaprxforward', always check the value returned by 'skbcopy' to avoid potential NULL pointer dereference in 'mwifiexuapqueuebridgedpkt', and drop original...

CVE-2023-53384

CVE-2023-53384 affects the Linux kernel wifi driver (mwifiex). The vulnerability is a possible NULL pointer dereference in mwifiex_handle_uap_rx_forward due to not verifying skb_copy() result, potentially dereferencing skb in mwifiex_uap_queue_bridged_pkt. The patch adds a check for skb_copy() re...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

SUSE CVE-2022-50364

In the Linux kernel, the following vulnerability has been resolved: i2c: mux: reg: check return value after calling platformgetresource It will cause null-ptr-deref in resourcesize, if platformgetresource returns NULL, move calling resourcesize after devmioremapresource that will check 'res' to...

CVE-2025-10603 PHPGurukul Online Discussion Forum search_result.php sql injection

A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/adminforum/searchresult.php. Executing manipulation of the argument Search can lead to sql injection. The attack can be launched remotely. The exploit...

CVE-2025-10603

PHPGurukul Online Discussion Forum 1.0 is affected in /admin/admin_forum/search_result.php. Manipulating the Search parameter leads to SQL injection; the vulnerability is remotely exploitable and has publicly disclosed exploits. Connected sources corroborate the file and the injection vector, wit...

PHPGurukul Online Discussion Forum SQL注入漏洞

Online Discussion Forum is an online forum. Online Discussion Forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /admin/adminforum/searchresult.php. An attacker can exploit this...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688

CVE-2025-4688 describes an SQL injection in BGS Interactive SINAV.LINK Exam Result Module (versions before 1.2). The vulnerability stems from improper neutralization of special elements in SQL commands, enabling unauthorized database access with high impact (CVE score: CVSSv3.1 9.8, network attac...

CVE-2023-53286 RDMA/mlx5: Return the firmware result upon destroying QP/RQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously when destroying a QP/RQ, the result of the firmware destruction function was ignored and upper layers weren't informed about the failure. Which in turn could...

PT-2025-37913

Name of the Vulnerable Software and Affected Versions: SINAV.LINK Exam Result Module versions prior to 1.2 Description: An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in the SINAV.LINK Exam Result Module. This issue allows for SQL...