CVE Vulnerability Catalog

Wykryto podatność w SourceCodester Online Exam Form Submission w wersji 1.0, która dotyczy nieznanej części pliku /index.php. Manipulacja argumentem usn prowadzi do wstrzykiwania SQL, co umożliwia zdalne przeprowadzenie ataku.

SourceCodester Online Student File Management System 1.0 has a SQL injection vulnerability in /admin/delete_user.php via the user_id argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Podatność CVE-2025-10205 dotyczy użycia jednokierunkowego haszowania z przewidywalną solą w systemie ABB FLXEON. Problem ten występuje w wersjach FLXEON od 9.3.5 i nowszych.

Podatność związana z użyciem twardo zakodowanych poświadczeń w systemie ABB FLXEON. Problem ten dotyczy wersji FLXEON od 9.3.5 i nowszych.

In the Linux kernel, NFSv4.2 has a double-free of scratch buffer in READ_PLUS. The fix moves scratch handling to pageio code, preventing double-free and oops during decoding hole segments.

In the Linux kernel's ksmbd (SMB server) module, a race condition was found during concurrent SMB2 tree disconnects. This could lead to use-after-free (UAF) when accessing tcon structures concurrently.

In the Linux kernel, in the accel subsystem for Habana Labs, the destruction of the memory manager IDR was postponed to hpriv_release(). Previously, the IDR was destroyed when the file descriptor was released, but the user context might still be held and memory buffers still in use. Later calls to release those buffers would fail due to missing handles in the IDR, leading to a memory leak. The fix splits IDR destruction from memory manager fini and postpones it to hpriv_release() when there is no user context and no buffers are used.

In the Linux kernel, the lwt (lightweight tunnels) subsystem has an issue with return values of BPF xmit ops. Functions skb_do_redirect and bpf_lwt_xmit_reroute can return various positive values that are incorrectly treated as LWTUNNEL_XMIT_CONTINUE, leading to use-after-free and kernel crashes. The fix discards skb_do_redirect return values and converts bpf_lwt_xmit_reroute return values.

In the Linux kernel, in the media subsystem for the IPU bridge, a NULL pointer dereference during SSDB/PLD parsing was fixed. In ipu_bridge_parse_rotation() and ipu_bridge_parse_orientation(), the sensor->adev pointer was not set yet, leading to a NULL pointer dereference when warnings about unknown values were triggered. The fix sets sensor->adev earlier, with a borrowed ref, to avoid issues.

In the Linux kernel, the RDMA/cxgb4 driver has a potential NULL pointer dereference in pass_establish(). If get_ep_from_tid() fails to find an entry, the ep pointer is later dereferenced without a check. The fix adds a simple sanity check.

In the Linux kernel, a vulnerability in skb_segment can cause a kernel BUG when handling GSO packets with frag_list if a program uses BPF_FUNC_skb_pull_data to read beyond the head skb headlen. The issue arises from improper accounting of tail adjustment during pull operations. The fix marks such skbs as GSO_DODGY so segmentation can handle tail updates correctly.

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter.

A SQL Injection vulnerability was found in SourceCodester Online Student File Management System 1.0 in the file /admin/delete_student.php. By manipulating the stud_id argument, an attacker can execute arbitrary SQL queries. The vulnerability can be exploited remotely, and the exploit has been publicly disclosed.

A vulnerability was detected in SourceCodester Online Student File Management System 1.0 in an unknown function of /admin/update_student.php. Manipulation of the stud_id argument results in SQL injection, and the attack can be initiated remotely. The exploit is now public.

Podatność CVE-2025-8463 dotyczy SecHard Information Technologies i pozwala na ominięcie autoryzacji poprzez klucz kontrolowany przez użytkownika, co umożliwia wymuszone przeglądanie. Problem ten dotyczy wersji SecHard przed 3.6.2-20250805.

W wersjach NeuVector do 5.4.5 istnieje podatność, w której stały ciąg jest używany jako domyślne hasło dla wbudowanego konta `admin`. Jeśli to hasło nie zostanie zmienione natychmiast po wdrożeniu, każdy workload z dostępem do sieci w klastrze może wykorzystać domyślne dane uwierzytelniające do uzyskania tokena uwierzytelniającego.

A SQL injection vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0 in mysearch.php, where the search_field/search_text arguments are improperly handled, allowing remote attacks.

Podatność CVE-2025-0879 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w aplikacji Shopside, co umożliwia ataki typu Cross-Site Scripting (XSS). Wymaga ona wysokich uprawnień do wykorzystania.

The Sydney theme for WordPress (all versions up to and including 2.56) lacks a capability check on the 'activate_modules' function. Authenticated attackers with Subscriber-level access or higher can activate or deactivate theme modules.

Podatność CVE-2025-8411 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w produkcie Dokuzsoft Technology E-Commerce Web Design. Umożliwia to atak XSS poprzez nagłówki HTTP.