kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

CVE-2026-66915

creationtimestamp| type| source ---|---|--- 2026-08-10 10:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspvpwstsn2n 2026-08-10 10:53:53+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mspwps54m32i 2026-08-11 09:04:48+00:00| seen|...

CVE-2026-19075

All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl= on any aiovgvideos post public/video.php, AIOVGPublicVideo::downloadvideo, which reads the post's mp4 meta value and streams that URL's response back to the requester...

CVE-2026-14211

The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee provider is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any...

CVE-2026-19075 All-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter

All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl= on any aiovgvideos post public/video.php, AIOVGPublicVideo::downloadvideo, which reads the post's mp4 meta value and streams that URL's response back to the requester...

CVE-2026-17020

The Salon Booking System WordPress plugin through 10.30.33 does not verify that a requested booking belongs to the caller on one of its REST API endpoints, requiring only a basic read capability, allowing any authenticated user including a Subscriber or self-registered customer account to disclos...

kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

CVE-2026-19384

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-53984

creationtimestamp| type| source ---|---|--- 2026-08-10 03:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msp4ax5slh23...

CVE-2026-19380

creationtimestamp| type| source ---|---|--- 2026-08-10 02:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j3s7fc7zkx4aa...

CVE-2026-64665

creationtimestamp| type| source ---|---|--- 2026-08-10 01:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msovko4fac2t...

CVE-2026-72591: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted imageurl value in the PATCH /apis/web/v1/album/id/image endpoint...

PT-2026-69328

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Doctors Appointment System version 1.0 Description A SQL injection flaw exists that allows remote attackers to manipulate the ID argument. This issue occurs within an unknown function in the '/admin/ajax.php?action=set...

PT-2026-69999

Name of the Vulnerable Software and Affected Versions Zephyr versions 3.5.0 and later Description An out-of-bounds write exists in the tls opt dtls peer connection id value get function within subsys/net/lib/sockets/sockets tls.c. This function handles the getsockoptSOL TLS, TLS DTLS PEER CID VAL...

CVE-2026-8718: Out-of-bounds Write

tlsoptdtlspeerconnectionidvalueget in subsys/net/lib/sockets/socketstls.c, which handles getsockoptSOLTLS, TLSDTLSPEERCIDVALUE, passed the caller-supplied optval directly to mbedtlssslgetpeercid without verifying the buffer was at least MBEDTLSSSLCIDOUTLENMAX default 32 bytes. mbedtlssslgetpeerci...

PT-2026-69831

An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/event id/question/create endpoint. The postCreateEventQuestion method loads the...

PT-2026-69475

Name of the Vulnerable Software and Affected Versions gabehf/Koito versions prior to 0.3.3 Description A server-side request forgery SSRF issue allows an authenticated user to force the server to perform HTTP requests to arbitrary internal or external hosts. This occurs when a crafted image url...

CVE-2026-19384: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...

PT-2026-69457

Name of the Vulnerable Software and Affected Versions 4xmen/pm2panel affected versions not specified Description An OS command injection flaw allows an authenticated remote attacker to execute arbitrary system commands on the host. The issue occurs in the pm2panel.js handler where the id paramete...

PT-2026-76471

Summary A user granted write access to a shared chat folder could permanently delete chats and messages belonging to the folder's owner. Deleting a folder cascades into the owner's chats and the entire subfolder subtree, and the deletion handler required only write access on subfolders instead of...