CVE-2025-9009

The CVE covers itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function in /admin/email_setup.php where manipulating the Name argument triggers SQL injection. The issue allows remote exploitation and the exploit has been disclosed publicly. Connected sources cons...

CVE-2025-4410

A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitrary code...

itsourcecode Online Tour and Travel Management System 注入漏洞

itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system . An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which originates from a SQL injection due to incorrect...

PT-2025-33441 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is located in an unknown function within the...

Linux Distros Unpatched Vulnerability : CVE-2025-37778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Fix dangling pointer in krbauthenticate krbauthenticate frees sess-user and does not set the pointer to NULL. It calls ksmbdkrb5authenticate to...

Linux Distros Unpatched Vulnerability : CVE-2025-38035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: don't restore null skstatechange queue-statechange is set as part of nvmettcpsetqueuesock, but if the TCP connection isn't established when...

Linux Distros Unpatched Vulnerability : CVE-2023-0122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service D...

Linux Distros Unpatched Vulnerability : CVE-2024-35850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non- serdev setup Qualcomm ROME controllers can be...

Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

Malicious code in setup-docker (npm)

The package setup-docker was found to contain malicious code...

Malicious code in setup-foreman (npm)

The package setup-foreman was found to contain malicious code...

Malicious code in setup-grunt (npm)

The package setup-grunt was found to contain malicious code...

MAL-2025-7746 Malicious code in @digital-wealth-web/cwp-service-setu (npm)

The package @digital-wealth-web/cwp-service-setu was found to contain malicious code...

Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

MAL-2025-33024 Malicious code in setup-docker (npm)

The package setup-docker was found to contain malicious code...

MAL-2025-33026 Malicious code in setup-grunt (npm)

The package setup-grunt was found to contain malicious code...

MAL-2025-33025 Malicious code in setup-foreman (npm)

The package setup-foreman was found to contain malicious code...

MAL-2025-33027 Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...

MAL-2025-26123 Malicious code in mean_setup (npm)

The package meansetup was found to contain malicious code...