CVE-2026-7158

A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6. Affected by this issue is the function validateurlsafe of the file src/mcpurldownloader/server.py. Such manipulation of the argument url leads to server-side request forgery. The attack...

CVE-2025-71148

A socket leak vulnerability was found in the Linux kernel's TLS handshake subsystem. When handshakereqsubmit fails before the request is hashed, it does not restore the original sk-skdestruct pointer. This causes handshakeskdestruct to return early without calling the original destructor, resulti...

CVE-2023-54157

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc-vma in race with munmap cmllamas: clean forward port from commit 015ac18be7de "binder: fix UAF of alloc-vma in race with munmap" in 5.10 stable. It is needed in mainline after the revert of commit...

EUVD-2025-31082

Malicious code in bioql PyPI...

PT-2023-26391 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic issue was found in DedeBIZ, affecting an unknown functionality of the file /admin/vote edit.php. This issue leads to cross site scripting and can be launched remotely. The exploit has been...

PT-2022-26438 · Hcl +1 · Bigfix Platform

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logge...