CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-79148

An off-by-one error in the DevTools component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted Chrome extension, to read memory inside the sandbox . Chromium rated this Low severity, while the CNA-assigned CVSS 3.1 score is 9.1...

CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

CVE-2026-79777

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

EUVD-2026-65527

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

CVE-2026-79406

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

CVE-2026-79406 macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

CVE-2026-79406

macrozheng mall (open-source e-commerce platform) versions up to 1.0.3 contain a business logic error in the function OmsCartItemServiceImpl.updateQuantity , accessible via the endpoint /cart/update/quantity . Manipulating the quantity argument allows a remote, authenticated attacker to trigger l...

EUVD-2026-65486

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

CVE-2026-74680

A flaw was found in the Linux kernel's cxacru USB ATM driver. When the cxacrucm function encounters an error, it fails to properly terminate an already submitted receive USB Request Block URB. This oversight can lead to the driver attempting to resubmit an active URB, which triggers a warning in...

CVE-2025-6082

CVE-2025-6082 PoC per Full Path Disclosure Autore : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilità : Full Path Disclosure CWE-200 Descrizione Questa Proof‑of‑Concept sfrutta un bug di Full Path Disclosure nel plugin WordPress Birth Chart Compatibility versioni ≤ 2.0. Il POC...

The vulnerability of the xt_ct_tgDestroy() function in the net/netfilter/xt_CT.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xtcttgDestroy function in the net/netfilter/xtCT.c module of the netfilter component of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the qla2xxxpci_error_detected() function in the drivers/scsi/qla2xxx/qla_os.c driver module allows a hacker to trigger a service failure.

The vulnerability of the qla2xxxpcierrordetected function in the drivers/scsi/qla2xxx/qlaos.c driver module for Linux SCSI devices is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the qlt_free_session_done() function in the drivers/scsi/qla2xxx/qla_target.c driver for Linux SCSI device drivers allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

The vulnerability of the ath12k_mac_op_flush() function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath12kmacopflush function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker...

The vulnerability of the function io_register_resize_rings() in the io_uring/register.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioregisterresizerings function in the iouring/register.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the log_conflict_inodes() function in the fs/btrfs/tree-log.c file of the Btrfs file system’s kernel in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the logconflictinodes function in the fs/btrfs/tree-log.c file of the Btrfs file system in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the gadget_unbind_driver() function in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the gadgetunbinddriver function in the drivers/usb/gadget/udc/core.c file of the Linux USB device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause service failures...

PT-2026-81726

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An off-by-one error in DevTools allows a remote attacker to potentially read memory inside the sandbox. This issue can be exploited through social engineering using a crafted Chrome...