PT-2026-69364

Name of the Vulnerable Software and Affected Versions Salon Booking System versions prior to 10.30.34 Description The plugin fails to perform capability checks or validate the OAuth state value during the Google Calendar authorization callback. Because this callback is accessible to unauthenticat...

CVE-2026-68218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove callback to free its resources, thus fixing memory leak...

PT-2026-69541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the afiucv hs callback syn function. This occurs when the function attempts to allocate a child socket using GFP ATOMIC and the allocation fails,...

PT-2026-69601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA timer component. The function snd timer close locked drains the closing instance's own in-flight callback IFLG CALLBACK but fails to drain those...

PT-2026-69593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the RX worker of the Linux kernel when handling PKT TYPE TXRX NOTIFY events on non-mmio buses, such as USB. The functions mt7925 rx check and mt7925...

PT-2026-69633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/vc4 component where the BO cache timer callback schedules time work, which can subsequently rearm the timer via the vc4 bo cache free old function. The vc4 bo...

The vulnerability of the sneeit_articles_pagination_callback() function in the Sneeit Framework, a content management system for WordPress, allows a hacker to execute arbitrary code.

The vulnerability of the sneeitarticlespaginationcallback function in the Sneeit Framework, a content management system for WordPress, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-19324

HelloGGX shadcn-vue-mcp is affected by a path traversal in fs.promises.readFile within src/server/callback-server.ts. The issue arises from manipulating the filepath argument, enabling local execution. The description notes a rolling release strategy, so specific affected or updated releases cann...

CVE-2026-19324 HelloGGX shadcn-vue-mcp callback-server.ts fs.promises.readFile path traversal

A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file src/server/callback-server.ts. This manipulation of the argument filepath causes path traversal. The attack is restrict...

CVE-2026-19324 HelloGGX shadcn-vue-mcp callback-server.ts fs.promises.readFile path traversal

A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file src/server/callback-server.ts. This manipulation of the argument filepath causes path traversal. The attack is restrict...

CVE-2026-19324 HelloGGX shadcn-vue-mcp callback-server.ts fs.promises.readFile path traversal

A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file src/server/callback-server.ts. This manipulation of the argument filepath causes path traversal. The attack is restrict...

PT-2026-69247

Name of the Vulnerable Software and Affected Versions HelloGGX shadcn-vue-mcp versions up to e170e277b94235cde627803277fc8c41103a4d38 Description A path traversal issue exists in the fs.promises.readFile function within the src/server/callback-server.ts file. This occurs when the filepath argumen...

CVE-2026-19324: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file src/server/callback-server.ts. This manipulation of the argument filepath causes path traversal. The attack is restrict...

CVE-2026-47127

Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and unconditionally grants a Premium subscription to the...

CVE-2026-47127 Ghostfolio has a Stripe subscription bypass

Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and unconditionally grants a Premium subscription to the...

CVE-2026-47127

Summary: Ghostfolio prior to 3.4.0 allowed any authenticated user to self-grant a 1-year Premium subscription via the Stripe checkout success callback at GET /api/v1/subscription/stripe/callback?checkoutSessionId=, which unconditionally assigns the session’s client_reference_id without checking s...

CVE-2026-47127 Ghostfolio has a Stripe subscription bypass

Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and unconditionally grants a Premium subscription to the...

JLSEC-2026-1219 Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a...

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

CVE-2026-19193 Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may...

PT-2026-69158

Name of the Vulnerable Software and Affected Versions Ghostfolio versions prior to 3.4.0 Description The Stripe checkout success-URL handler at GET /api/v1/subscription/stripe/callback?checkoutSessionId= retrieves the Stripe Checkout Session by ID and grants a Premium subscription to the client...