GHSA-4564-PVR2-QQ4H

creationtimestamp| type| source ---|---|--- 2026-02-18 21:10:40+00:00| seen| https://gist.github.com/alon710/8ad6d87be4b20c87d4ffa6ab748f3c93...

GHSA-7RCP-MXPQ-72PJ

creationtimestamp| type| source ---|---|--- 2026-02-18 20:40:39+00:00| seen| https://gist.github.com/alon710/2c65b9c465b98e060e5d00554406c73c...

GHSA-JFV4-H8MC-JCP8

creationtimestamp| type| source ---|---|--- 2026-02-18 20:10:40+00:00| seen| https://gist.github.com/alon710/46d127cf3a2094bb829e405b76bec24c...

GHSA-X22M-J5QQ-J49M

creationtimestamp| type| source ---|---|--- 2026-02-18 19:10:39+00:00| seen| https://gist.github.com/alon710/482912f82ba4201d8ab50a46212af3c4...

GHSA-H9G4-589H-68XV

creationtimestamp| type| source ---|---|--- 2026-02-18 18:40:39+00:00| seen| https://gist.github.com/alon710/844fd31d09ce1f0bffd3bf36057f5d6f...

AZL-77951 CVE-2025-71233 affecting package kernel for versions less than 6.6.130.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

UBUNTU-CVE-2025-71233

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

CVE-2026-23216

creationtimestamp| type| source ---|---|--- 2026-02-18 16:05:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116092483157089542 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...

CVE-2025-71233

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

CVE-2025-71233 PCI: endpoint: Avoid creating sub-groups asynchronously

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

CVE-2025-71233 PCI: endpoint: Avoid creating sub-groups asynchronously

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

GHSA-J27P-HQ53-9WGC

creationtimestamp| type| source ---|---|--- 2026-02-18 08:10:30+00:00| seen| https://gist.github.com/alon710/e6f79cdbd45ffed4bc877651bc55bea4...

CVE-2026-1937

creationtimestamp| type| source ---|---|--- 2026-02-18 07:20:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4k5rfaio2x 2026-02-18 07:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116090459262209792 2026-02-18 07:30:32+00:00| seen|...

GHSA-Q447-RJ3R-2CGH

creationtimestamp| type| source ---|---|--- 2026-02-18 06:40:30+00:00| seen| https://gist.github.com/alon710/00067d90a2461fbca1a5464c0bbbd63b...

CVE-2026-1368

The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key...

CVE-2026-2023 WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation

The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0. This is due to missing nonce validation in the ajaxsavecustomplugin function, which is disabled by prefixing the check with 'false &&'. This makes it possible for...

GHSA-V6C6-VQQG-W888

creationtimestamp| type| source ---|---|--- 2026-02-18 01:10:31+00:00| seen| https://gist.github.com/alon710/c1dd925bfef757917be700332b8feba8...

CVE-2025-70062

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

PHPGurukul Hospital Management System 安全漏洞

PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL. The PHPGurukul Hospital Management System v4.0 version has a security vulnerability. This vulnerability stems from the lack of cross-site request forgery token verificati...

WordPress Plugin 'LA Studio Element Kit for Elementor' < 1.6.0 Unauthenticated Privilege Escalation via Backdoor

The WordPress application running on the remote host has a version of the 'LA Studio Element Kit for Elementor' plugin that is prior to 1.6.0. It is, therefore, affected by an unauthenticated privilege escalation vulnerability. The plugin contains a backdoor that allows unauthenticated attackers ...