CVE-2025-22954

Koha CVE-2025-22954：lateissues-export.pl 中的 SQL 注入漏洞 概述 本仓库包含 CVE-2025-22954 的概念验证，这是一个严重影响级别（CVSS 10.0）的 SQL 注入漏洞，影响 24.11.02 之前的 Koha 版本。该漏洞存在于 C4/Serials.pm 的 GetLateOrMissingIssues 函数中，该函数由 /serials/lateissues-export.pl 脚本调用。漏洞可通过 supplierid 或 serialid 参数进行利用。 CVE ID| CVE-2025-22954 ---|---...

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

Design/Logic Flaw

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...