PT-2026-61040

Name of the Vulnerable Software and Affected Versions django-oauth-toolkit version 3.3.0 Description A remote attack targeting the load id token function within the oauth2 provider/oauth2 validators.py file can lead to session expiration. Recommendations At the moment, there is no information abo...

PT-2026-61075

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /edit subject.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-16227: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /editsubject.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

PT-2026-61435

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc3 Description A double free issue exists in the qed cxt tables alloc function. When a PF or VF CID bitmap allocation fails, qed cid map alloc triggers a jump to cid map fail and frees previously allocated C...

PT-2026-61457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the proc show files function within the ksmbd module. This occurs when an SMB2 client opens a file using a durable v2 handle and then performs an SMB...

PT-2026-61351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU double-fetch issue exists in the mana hwc rx event handler function. The hwc msg id is read from DMA-coherent memory and bounds-checked, but is...

PT-2026-61483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm ffa firmware component where the bus match callback unconditionally dereferences the id table of FF-A drivers. Because the system assumes every driver provides...

PT-2026-61333

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd reopen durable fd republishes the same ksmbd file into the session volatile-id table. If smb2 open then takes a later error path,...

PT-2026-61051

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument project id leads to authorization bypass. It is...

CVE-2026-16228: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /editschoolyr.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and...

PT-2026-61074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the kernel lacks dirty tracking support on nested domains attached to a Process Address Space ID PASID. A PASID is a unique identifier...

PT-2026-61340

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpio aggregator. The problem occurs when aggr-lookups-dev id is freed during an error sequence before the corresponding entry is removed from the...

EUVD-2026-45399

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /editroom1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

MINI-23JP-R99V-VR66

Bulletin has no description...

Authorization Bypass

Kimai is vulnerable to Authorization Bypass. The vulnerability is due to insufficient team-lead authorization checks in the timesheet list API when filtering by user ID, which allows an attacker with viewothertimesheet permission to enumerate other users' timesheet records and disclose sensitive...

CVE-2026-16130 nearai ironclaw write_file path_utils.rs validate_path link following

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validatepath of the file src/tools/builtin/pathutils.rs of the component writefile. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

CVE-2024-58368

SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server...

OPENSUSE-SU-2026:21375-1 Security update for jackson-annotations, jackson-core, jackson-databind

This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions bsc1268902. - CVE-2026-59889: missing view guard when deserializi...

CVE-2026-16084 Sipeed PicoClaw web.go web_fetch server-side request forgery

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function webfetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

CVE-2026-9734

The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the storeInfo function. This makes it possible for unauthenticated attackers to modify the plugin's...