CVE-2025-51667

A limited SQL injection vulnerability exists in the simple-admin-core system (versions v1.2.0 through v1.6.7 ). The flaw is located in the /sys-api/role/update interface and stems from insufficient input validation where user input is not properly sanitized. This vulnerability could lead to parti...

arduino-esp32 跨站请求伪造漏洞

arduino-esp32 is an Espressif open source Arduino kernel for ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2. A cross-site request forgery vulnerability exists in arduino-esp32 versions prior to 3.2.1, which stems from an update endpoint accepting a POST request without CSRF protection...