CVE-2025-39778 objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmetctrlstateshow The cstsstatenames array only has six sparse entries, but the iteration code in nvmetctrlstateshow iterates seven, resulting in a potential out-of-bounds stack...

CVE-2025-3686

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

CVE-2025-3686

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

oasys 路径遍历漏洞

oasys is an OA office automation system by the individual developer misstt123. A path traversal vulnerability exists in version 1.0 of oasys, which stems from an incorrect operation of the function image in the file /show that results in path traversal...

CVE-2025-3686: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the showmeminfo function in the Linux kernel’s Direct Rendering Infrastructure DRI support driver is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-27980

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=...

PT-2025-16343

Name of the Vulnerable Software and Affected Versions cashbook version 4.0.3 Description The issue is related to an arbitrary file read vulnerability. It affects the "/api/entry/flow/invoice/show?invoice=" API endpoint, where the invoice parameter is involved. Recommendations For version 4.0.3,...

Linux kernel ftrace Heap Buffer Overflow DoS

The vulnerability of the ftrace component in the functionstatshow function of the Linux operating system’s kernel is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2025-32678

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

CVE-2025-30654

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Through the execution of a specific...

CVE-2025-30652

An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service DoS. When asregex-optimized is configured and a specific "show...

CVE-2025-32678

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

CVE-2025-32678 WordPress WP Show Stats plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

CVE-2025-32678

CVE-2025-32678 is a CSRF in the WordPress plugin WP Show Stats, affecting versions up to 1.5 (noted as from n/a through 1.5). The entry specifies a Cross-Site Request Forgery vulnerability with a CVSS v3.1 base score of 4.3 (Medium) and does not provide details on patch/version that fixes it. The...

PT-2025-15822 · WordPress · Wp Show Stats

Name of the Vulnerable Software and Affected Versions: Ashish Ajani WP Show Stats versions n/a through 1.5 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects the WP Show Stats plugin, enabling Cross Site Request...

CVE-2025-30652: Improper Handling of Exceptional Conditions

An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service DoS. When asregex-optimized is configured and a specific "show...

WordPress plugin WP Show Stats 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-32678: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

CVE-2025-30654: Exposure of Sensitive Information to an Unauthorized Actor

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Through the execution of a specific...