PT-2025-29339 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: A critical issue exists in PHPGurukul Student Result Management System 2.0. The vulnerability is due to a SQL injection flaw within the GET Parameter Handler component,...

pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result

...

SUSE CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

UBUNTU-CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

CVE-2025-38314 virtio-pci: Fix result size returned for the admin command completion

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

CVE-2025-38314

CVE-2025-38314 is a Linux kernel vulnerability affecting virtio-pci. The issue arises in virtio_pci_admin_dev_parts_get(), where the result_sg_size is filled with the length from virtqueue_get_buf(), inadvertently including an 8-byte status, causing oversized transfer data and potential kernel bu...

CVE-2025-21444

Memory corruption while copying the result to the transmission queue in EMAC...

COVID19 Testing Management System Input Validation Error Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System has an input validation error vulnerability that originates from an open redirect due to the operation of the parameter q in the file /search-report-result.php. No detai...

COVID19 Testing Management System /search-report-result.php File Code Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a code injection vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter q in file...

📄 libxslt xsltParseStylesheetProcess Use-After-Free

There is a use-after-free issue in libxslt read on a namespace URL stored in exclPrefixTab. The issue was reproduced on the latest Git version. The proof of concept and ASAN log are provided at the end of the report. There is a use-after-free issue in libxslt read on a namespace URL stored in...

CVE-2025-6477

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name...

CVE-2025-6475

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...

CVE-2025-6477

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name...

CVE-2025-6477

SourceCodester Student Result Management System 1.0 contains an XSS vulnerability in the System Settings Page (file path: /script/admin/system) triggered by manipulating the School Name parameter. The issue is exploitable remotely, with public exploit disclosure cited. Affected functionality is u...

CVE-2025-6477 SourceCodester Student Result Management System System Settings Page system cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name...

CVE-2025-6477 SourceCodester Student Result Management System System Settings Page system cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name...

CVE-2025-6475

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...

CVE-2025-6475

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...

CVE-2025-6475

CVE-2025-6475 affects SourceCodester Student Result Management System 1.0, specifically the Manage Students Module and the file path /script/admin/manage_students. The vulnerability is a cross-site scripting flaw arising from handling input in that file, exploitable remotely with public disclosur...