fio 代码问题漏洞

fio is a flexible I/O testing software by the individual developer Jens Axboe. A code issue vulnerability exists in fio 3.41 and earlier versions, which stems from a null pointer dereference in the strbufferpatterncb function in the options.c file, which could lead to a local attack...

BELL-CVE-2025-39850

Bulletin has no description...

BELL-CVE-2023-53424

Bulletin has no description...

BELL-CVE-2023-53434

Bulletin has no description...

Ashlar-Vellum Cobalt Resource Management Error Vulnerability

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. Ashlar-Vellum Cobalt suffers from a Resource Management Error vulnerability that originates from not verifying the existence of an object before performing an operation on it. An attacker...

CVE-2025-10431

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajaxrepresent.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public...

BELL-CVE-2025-39826

Bulletin has no description...

BELL-CVE-2025-39812

Bulletin has no description...

BELL-CVE-2023-53289

Bulletin has no description...

BELL-CVE-2023-53292

Bulletin has no description...

Missing Authorization

Overview matrix-js-sdk is a Matrix Client-Server SDK for Javascript Affected versions of this package are vulnerable to Missing Authorization via insufficient validation of room predecessor links in the getJoinedRooms function. An attacker can cause a user to join an attacker-controlled room by...

CVE-2023-53313 md/raid10: fix wrong setting of max_corr_read_errors

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of maxcorrreaderrors There is no input check when echo md/maxreaderrors and overflow might occur. Add check of input number...

CVE-2025-59270 psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...

CVE-2025-7743 Sensitive Data Exposure in Dolusoft's Omaspot

Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation. This issue affects Omaspot: before 12.09.2025...

BELL-CVE-2023-53246

Bulletin has no description...

BELL-CVE-2023-53210

Bulletin has no description...

BELL-CVE-2023-53221

Bulletin has no description...

BELL-CVE-2023-53205

Bulletin has no description...

BELL-CVE-2023-53190

Bulletin has no description...

📄 Node.JS 4.1.1 Directory Listing

Node.JS versions 4.1.1 and below suffer from a Range header issue that results in a directory listing. !/bin/bash Exploit Title: Node.JS -u \n" exit else echo -e "\n+ TARGET: $TARGET$URI\n" curl -s -H "Range: 99999" $TARGET$URI | html2text | sed '1d;$d' fi...