78252 matches found
CVE-2026-63231
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...
CVE-2026-63231
Koollab LMS contains a post-authentication SQL injection in the face-to-face runs update endpoint. An authenticated attacker can trigger an error-based SQL condition to read the application database and obtain valid JWT tokens, enabling account takeover. The vulnerability is described across mult...
EUVD-2026-50126
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...
CVE-2026-64551
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP. This vulnerability allows a remote attacker or a local unprivileged user to potentially access and disclose sensitive information. By sending a malformed error message, the system can be tricked into reading and the...
PT-2026-65840
Name of the Vulnerable Software and Affected Versions undici versions 7.0.0 through 7.28.x undici versions 8.0.0 through 8.8.x Description The cache interceptor mishandles malformed Cache-Control private directives when used in shared mode. A degenerate qualified private directive, such as privat...
The vulnerability of the inet_diag_msg_sctpladdrs_fill() function in the net/sctp/diag.c module of the Linux operating system’s kernel implementation of the SCTP protocol allows a attacker to cause a service failure.
The vulnerability of the inetdiagmsgsctpladdrsfill function in the net/sctp/diag.c module of the SCTP protocol implementation in the Linux operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to...
FreeBSD -- Kernel stack disclosure via timer_settime(2)
Problem Description: To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output...
ROS-20260729-73-0018
The vulnerability of the Go programming language is related to incorrect calculations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
PT-2026-65701
A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover, via the SCORM report endpoint...
Linux Distros Unpatched Vulnerability : CVE-2026-58160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server reads out of bounds while parsing DNS answers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through...
PT-2026-65702
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...
RockyLinux 8 : firefox (RLSA-2026:47105)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47105 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in th...
SUSE CVE-2026-64544
In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - fix OOB read in pefiledigestpecontents pefiledigestpecontents computes the trailing-data hash length as pelen - hashedbytes + certssize. A crafted PE can make the addition exceed pelen, causing the unsign...
CVE-2026-47180
A flaw was found in Zeroconf, a Python implementation of multicast DNS service discovery. An unauthenticated attacker on the local network can send a specially crafted multicast DNS mDNS packet with chained pointers. This can trigger a recursion error, leading to sustained CPU usage, excessive...
EUVD-2026-49902
TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...
EUVD-2026-49888
Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::removeprefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix whi...
SUSE-SU-2026:22971-1 Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. -...
SUSE-SU-2026:22966-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...
SUSE-SU-2026:22969-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. ...