CVE-2025-2090: Improper Access Control

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be...

PT-2025-10092

Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System version 1.0 Description A critical issue affects some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler, leading to improper access controls. The attack may be...

PT-2025-14356

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel's MLX5 network driver. The problem arises in the mlx5 chains create table function, where the return values of ml...

USN-7303-2 linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the ring buffer unvalidated persistent metadata sub-buffer array, which could lead to a crash...

CVE-2025-25664

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub49E098 function...

PT-2025-7563 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version 16.03.34.06 Description: A stack overflow issue was discovered in the sub 49E098 function through the shareSpeed parameter. This issue allows for potential exploitation. No information is available regarding the estimated...

PT-2025-7565

Name of the Vulnerable Software and Affected Versions Tenda AC8V8 is not mentioned, instead Tenda AC8V4 version V16.03.34.06 Description A stack overflow issue was discovered in the sub 47D878 function via the shareSpeed parameter. Recommendations For Tenda AC8V4 version V16.03.34.06, as a...

Azure Linux 3.0 Security Update: nodejs / nodejs18 / reaper (CVE-2024-28863)

The version of nodejs / nodejs18 / reaper installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28863 advisory. - node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the numbe...

CVE-2024-57357

An issue in TPLINK TL-WPA 8630 TL-WPA8630USV22.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub4256CC, which allows command injection by injecting 'devpwd'...

TP-LINK TL-WPA8630P 安全漏洞

TP-LINK TL-WPA8630P is a WIFI extender from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WPA8630P that stems from a command injection vulnerability in the devpwd parameter of the sub4256CC function...

CVE-2020-15174

In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the will-navigate event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in...

PT-2025-14290

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the wifi and nl80211 components. The issue arises when both MONITOR FLAG COOK FRAMES and MONITOR FLAG ACTIVE flags are s...

PT-2025-3465 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: A buffer overflow issue was discovered, where the page field is copied to the stack without length verification. This could allow a remote attacker to execute arbitrary code or cause a denial o...

[SECURITY] Fedora 41 Update: redict-7.3.2-1.fc41

Redict is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

PT-2025-7556 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the sub 452A4 function. This can potentially allow for exploitation, although specific details about the estimated number of affected devices or...

[SECURITY] Fedora 41 Update: valkey-8.0.2-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

PT-2026-4370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's RDMA/core component related to reference counting within the ib del sub device and put function. Specifically, the code fails to drop a device referen...

PT-2024-10253 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: The issue is related to a buffer overflow vulnerability. The anonymous protect status field is copied to the stack without length verification, which can be exploited by a remote attacker to...

PT-2024-10254 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: A buffer overflow issue was discovered, where the action field is copied to the stack without length verification. This could allow a remote attacker to impact the confidentiality, integrity, a...