libpng: libpng: Use-after-free in sequential reader when png_read_end called without reading image rows

A flaw was found in libpng. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS by supplying a specially crafted PNG image. Incomplete decompression of certain metadata chunks can leave a dangling pointer in the library's internal decompression state. When an...

CVE-2026-101110

CVE-2026-101110 — OrdaSoft Book Library Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101110 — OrdaSoft Book Library Free for Joomla ≤ 6.4.6. Upgrade to 6.4.7+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101110 Catalog| https://pocbit.org/pocs/ Component| combooklibrary Fil...

CVE-2026-101108

CVE-2026-101108 — OrdaSoft Vehicle Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101108 — OrdaSoft Vehicle Manager Free Joomla extension ≤ 6.5.7. Fixed in 6.5.8+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101108 Catalog| https://pocbit.org/pocs/ Component|...

CVE-2026-100752

CVE-2026-100752 — OrdaSoft Real Estate Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-100752 — OrdaSoft Real Estate Manager Free Joomla extension ≤ 6.7.8. Fixed in 6.7.9+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-100752 Catalog| https://pocbit.org/pocs/ Component|...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.3 contains security vulnerabilities. These vulnerabilities arise from adding pointers to the extended area into the expected list when calling auxiliary functions. Subsequent reallocations of space after adding extensions cause the pointers to become invalid. Accessing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the use of flowoffloadworkdel, which releases NFFLOWHWDEAD before the work thread has cleared NFFLOWHWPENDING. This concurrent garbage collection may cause the flow to be released prematurely, leading t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.5 has a security vulnerability. This vulnerability arises from a failure in power management settings, where the probe function does not unregister the registered iiodevice when it fails, resulting in the device being released, but the sysfs/chardev nodes still pointing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.36 has a security vulnerability. This vulnerability arises from the fact that the session timer is not stopped when a RX BA session is terminated. As a result, the timer may continue to queue on the released tidrx, and the expiration handler can re-activate the timer...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from mac80211’s ieee80211vifusereservedswitch function, which incorrectly counts the reserved range during reserved switching. This approach does not ensure that the reserved context matches the current replacement context. A...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the use of meshfasttxcache, which stores original meshpath pointers. After deleting and clearing the cache, searches for existing paths may still insert new cache entries, causing the cache to point to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability arises from the fact that the cdns3gadgetexit function does not wait for the pendingstatuswq and alignedbufwq tasks to complete before releasing the endpoints and buffers. This may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from improper sequencing of canceling wdtwork and releasing WDT IRQ. As a result, the watchdog interrupt may reschedule tasks and access memory that has been released, leading to reuse of freed resources...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities stem from binderfs’ binderadddevice function, which accesses freed objects after simpledonecreating releases the parent directory lock and dentry references. Concurrently, unlinkat can delete the new device ent...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities arise from the fact that work items are not disabled before termination. As a result, notification callback functions access a linker array that has already been released, or duplicate instances are registered,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.13 contains security vulnerabilities. These vulnerabilities arise from a race condition that occurs when canceling requests for the lightning control channel. This race condition causes the tbcfgrequestwork and tbcfgrequest Cancel functions to compete, resulting in the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the fact that adis16400serialnumberfops does not call debugfsfileget, which provides protection against debugging operations on debugfs. As a result, the read operation may release the underlying iiodev...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from the lack of holding of hcidevlock during the enhanced SCO setup process. The CVSD capability check and the operation of findnextescoparam that dereferences conn-parent and releases the parent object o...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the use of adsdbufferpostenable, which allocates samplesbuf during runtime. However, when unbinding the buffer, it is released before the IRQ is disabled. As a result, the handler may still copy samples...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities arise from the Bluetooth mgmt mechanism, which fails to remove queued meshsendsync entries when transmission is canceled. As a result, the meshtx pointer, which has been released, may be reused in subsequent...