RHEL 9 : kernel (RHSA-2025:18054)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18054 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: hfsc: Fix a potenti...

EUVD-2025-34416

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally...

CVE-2025-55676 Windows USB Video Class System Driver Information Disclosure Vulnerability

...

Lenovo Universal Device Client (UDC) Vulnerability - Lenovo Support US

No description provided...

Windows USB Video Class System Driver Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally...

PT-2025-42026

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description The Windows USB Video Driver exhibits a flaw where the generation of error messages can expose sensitive information locally to an authorized attacker. The issue allows for t...

Linux UDF Merge Extents

The vulnerability of the udfmergeextents function in the fs/udf/inode.c file of the OSTA-UDF file system of the Linux operating system is related to memory allocation beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux Distros Unpatched Vulnerability : CVE-2022-50544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo xhciallocstreaminfo allocates stream context array for streaminfo -streamctxarray with...

SUSE-SU-2025:03575-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-15070051 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: schqfq: Fix race condition on qfqaggregate bsc1247315. - CVE-2025-22023: usb: xhci: Don't skip on Stopped - Length Invalid bsc1246754. - CVE-2025-38089:...

PT-2025-41732

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A weakness exists in the UART Interface component of Tomofun Furbo 360 and Furbo Mini. Manipulation of this component can result i...

CVE-2025-60307

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts...

EUVD-2025-33731

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts...

CVE-2025-60307

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts...

EUVD-2025-33609

Malicious code in tw-webkit-universal npm...

Malicious code in tw-webkit-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48288 Malicious code in tw-webkit-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-60307

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts...

PT-2025-41575

Name of the Vulnerable Software and Affected Versions code-projects Computer Laboratory System version 1.0 Description The software contains a SQL injection flaw. Specifically, providing a universal password in the Password field on the login page allows bypassing authentication. The affected API...

CVE-2025-60307

The code-projects Computer Laboratory System 1.0 is vulnerable to a SQL injection flaw due to a lack of validation for externally entered SQL statements in the Password field of the login page. An attacker can exploit this by entering a universal password to bypass login validation . Remediation ...

A Meta-Complexity Characterization of Minimal Quantum Cryptography

We give a meta-complexity characterization of EFI pairs, which are considered the "minimal" primitive in quantum cryptography and are equivalent to quantum commitments. More precisely, we show that the existence of EFI pairs is equivalent to the following: there exists a non-uniformly samplable...