CVE-2025-22954

Koha CVE-2025-22954: Inyección SQL en lateissues-export.pl Resumen Este repositorio contiene una prueba de concepto para CVE-2025-22954, una vulnerabilidad de inyección SQL de criticidad alta CVSS 10.0 en Koha anterior a la versión 24.11.02. La vulnerabilidad existe en la función...

CVE-2025-22954: Improper Neutralization of Special Elements used in an SQL Command

GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter...

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

Design/Logic Flaw

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4529: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...