196525 matches found
CVE-2026-98749: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100shutdown stops the polling timer but returns early during system suspend. If the SPI device is unbound before resume, the serial core does not call max3100shutdown...
PT-2026-116883
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400 serial number fops is open coded and never calls debugfs file get, so debugfs remove recursive does not wait for a read in progress and unbind frees the iio dev...
PT-2026-116981
In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2 wakeup detected accesses the DWC2 host state and can rearm the wakeup timer. dwc2 hcd free currently deletes the timer only after freeing host-owned state, and timer...
PT-2026-117059
In the Linux kernel, the following vulnerability has been resolved: vc screen: reload vc pointer before if ret in vcs write to avoid UAF The reload of 'vc' added by commit 8fb9ea65c9d1 "vc screen: reload load of struct vc data pointer in vcs write to avoid UAF" sits after the 'if ret' block, so t...
huawei-p10-cve-2017-8890-unlock
Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...
libpng: libpng: Use-after-free in sequential reader when png_read_end called without reading image rows
A flaw was found in libpng. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by supplying a specially crafted PNG image. Incomplete decompression of certain metadata chunks can leave a dangling pointer in the library's internal decompression state. When an...
CVE-2026-101110
CVE-2026-101110 — OrdaSoft Book Library Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101110 — OrdaSoft Book Library Free for Joomla ≤ 6.4.6. Upgrade to 6.4.7+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101110 Catalog| https://pocbit.org/pocs/ Component| combooklibrary Fil...
CVE-2026-101108
CVE-2026-101108 — OrdaSoft Vehicle Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101108 — OrdaSoft Vehicle Manager Free Joomla extension ≤ 6.5.7. Fixed in 6.5.8+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101108 Catalog| https://pocbit.org/pocs/ Component|...
CVE-2026-100752
CVE-2026-100752 — OrdaSoft Real Estate Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-100752 — OrdaSoft Real Estate Manager Free Joomla extension ≤ 6.7.8. Fixed in 6.7.9+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-100752 Catalog| https://pocbit.org/pocs/ Component|...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.3 contains security vulnerabilities. These vulnerabilities arise from adding pointers to the extended area into the expected list when calling auxiliary functions. Subsequent reallocations of space after adding extensions cause the pointers to become invalid. Accessing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.5 has a security vulnerability. This vulnerability arises from a failure in power management settings, where the probe function does not unregister the registered iiodevice when it fails, resulting in the device being released, but the sysfs/chardev nodes still pointing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...
Linux Kernel Security Vulnerabilities
There are security vulnerabilities in Linux kernels versions 5.15.17 to 5.16, 5.16.3 to 5.17, and 5.17 itself. These vulnerabilities stem from the iio trigger not canceling reenablework before releasing the trigger. The worker that was last started via an ongoing IRQ can continue to run after...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.36 has a security vulnerability. This vulnerability arises from the fact that the session timer is not stopped when a RX BA session is terminated. As a result, the timer may continue to queue on the released tidrx, and the expiration handler can re-activate the timer...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from mac80211’s ieee80211vifusereservedswitch function, which incorrectly counts the reserved range during reserved switching. This approach does not ensure that the reserved context matches the current replacement context. A...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the use of meshfasttxcache, which stores original meshpath pointers. After deleting and clearing the cache, searches for existing paths may still insert new cache entries, causing the cache to point to...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.4 contains a security vulnerability. This vulnerability arises from the fact that the cdns3gadgetexit function does not wait for the pendingstatuswq and alignedbufwq tasks to complete before releasing the endpoints and buffers. This may lead to reuse after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from improper sequencing of canceling wdtwork and releasing WDT IRQ. As a result, the watchdog interrupt may reschedule tasks and access memory that has been released, leading to reuse of freed resources...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities stem from binderfs’ binderadddevice function, which accesses freed objects after simpledonecreating releases the parent directory lock and dentry references. Concurrently, unlinkat can delete the new device ent...