PT-2026-92327

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A permission bypass exists in multiple locations due to a missing permission check. This flaw allows for local escalation of privilege without requiring...

PT-2026-91851

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...

Linux Distros Unpatched Vulnerability : CVE-2026-90791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gfnodeunregister of the file scenegraph/basescenegraph.c of the...

PT-2026-92048

Name of the Vulnerable Software and Affected Versions WuzhiCMS versions prior to 4.1.1 Description A SQL injection issue exists in the article::getDataOfJson function within the '/index.php?m=content&f=article&v=getDataOfJson' endpoint. This occurs when the title/master table argument is...

PT-2026-93209

Name of the Vulnerable Software and Affected Versions Oracle GraalVM for JDK 17 version 23.0.13.1 Oracle GraalVM for JDK 21 version 23.1.12.1 Oracle GraalVM Enterprise Edition version 21.3.19.1 Oracle GraalVM version 25.0.4.1 Description A flaw in the Compiler component of Oracle GraalVM products...

PT-2026-92372

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92963

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.26.0.000 Description A flaw in the Access and security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can resu...

PT-2026-91856

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /update requirement status.php. The manipulation of the argument haydi results in sql injection. It is possible to launch the attack remotely. The...

PT-2026-92036

Name of the Vulnerable Software and Affected Versions OpenClaw ClawScan versions prior to 0.1.7 Description A flaw in the Static Scanner component, specifically within the file internal/runner/static scanner.go, allows for an incomplete comparison with missing factors. This issue can be exploited...

PT-2026-92749

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

PT-2026-93026

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

CVE-2026-90841

A SQL injection vulnerability in PHPGurukul Blood Donor Management System 1.0 affects the Report Endpoint (file /application/controllers/admin/Report.php). Manipulating the fromdate/todate arguments allows a remote, unauthenticated attacker to inject SQL, potentially compromising confidentiality,...

Exploit for Use After Free in Linux Linux_Kernel

AQUOS R6 GhostLock temporary root Device-specific Linux 5.4 p...

fm-poc-p0

FM P0 Proof of Concept Architecture: Python proposes, FM...

CVE-2026-90840

PHPGurukul Blood Donor Management System 1.0 is affected by an improper authentication vulnerability in the __construct function of /application/controllers/admin/Dashboard.php (Admin Controllers component). The flaw can be exploited remotely with no privileges required and no user interaction , ...

CVE-2026-90840 PHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely...

CVE-2026-90827

A vulnerability was identified in GPAC 26.07.0. This affects the function gfnodedeactivateex of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack must be carried out locally. The exploit is publicly available and might be used...

CVE-2026-90829 GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfdelfsetgroupcontents of the file bfd/elf.c of the component SHTGROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been...

CVE-2026-90829

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_elf_set_group_contents within the file bfd/elf.c , part of the SHT_GROUP Section Handler component. The flaw is triggered by local manipulation and results in low impact on confidentiality, integrity, and availability...

CVE-2026-90827 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free

A vulnerability was identified in GPAC 26.07.0. This affects the function gfnodedeactivateex of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack must be carried out locally. The exploit is publicly available and might be used...