CVE-2026-75820 Integer Truncation Leading to Heap Corruption in GNU Aspell

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

CVE-2026-94675

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-98199

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core increase number of phases and add new mask Increase the number of phases to 16 as a new upcoming device supports such a number. While at it, add a new mask for controlling the source of the output voltage. Note...

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

EUVD-2026-93065

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

CVE-2026-94675

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

CVE-2026-75820: Integer Overflow or Wraparound

GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word length is stored as a single byte, causing truncation for words whose length is a multiple of 256. This leads to heap...

CVE-2026-104073: Exposure of Resource to Wrong Sphere

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

PT-2026-106689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the RDMA/rxe component. The rxe get mcg function publishes a newly allocated multicast group in rxe-mcg tree before the backing Ethernet multicast...

PT-2026-106701

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfs skb reset frag walk iptfs skb reset frag walk advances to the fragment containing @offset with an unbounded loop: while offset = walk-past + walk-fragswalk-fragi.len walk-past +=...

CVE-2026-94675: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

PT-2026-106319

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description A security flaw allows remote attackers to perform cross site scripting XSS, a technique where malicious scripts are injected into trusted websites, via an unknown function with...

PT-2026-106489

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack = 6.2.13 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-75820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal...

CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.13...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Check the bearer type before calling tipcudpnlbeareradd syzbot reported the following general protection fault 1: General protection fault, likely for non-canonical address 0xdffffc0000000010: 0000 1 PREEMPT SMP KASAN...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fixed possible resource leaks in mpt3sastransportportadd. In mpt3sastransportportadd, if sasrphyadd returns an error, sasrphyfree must be called to free the resources allocated in sasenddevicealloc. Otherwise, a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fixed an integer overflow in the volume boundary check of rununpack. The volume boundary check lcn + len sbi-used.bitmap.nbits uses a raw addition, which can cause rounding for large values of lcn and len, thereby bypassin...