Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from a logical flaw in the 32-bit operation zero extension of the BPF verifier, which may allow arbitrary values to be injected into the upper half of the register...

Curl encryption vulnerability

The curl version 7.81.0 to 8.22.0 has an encryption-related vulnerability. This vulnerability stems from logical flaws in the curl command-line tool. As a result, the SSH host authentication option is only set when using direct SFTP or SCP interactions. However, it is not set during redirection,...

CVE-2026-72703

A flaw was found in Rocq Prover. The guard checker incorrectly processes parameters of nested mutual fixpoints when cross-calls occur between different bodies of the fixpoint. This oversight allows the system to accept non-terminating definitions as structurally decreasing. This critical logical...

WordPress CAPTCHA: A vulnerability in 4WP that allows bypassing verification

WordPress CAPTCHA 4WP is a paid verification plugin designed specifically for WordPress. It integrates third-party services such as Google reCAPTCHA, hCaptcha, and Cloudflare Turnstile to prevent robot attacks, spam comments, fake registrations, and automated login attempts. WordPress CAPTCHA 4WP...

EUVD-2025-7252

Malicious code in bioql PyPI...

CVE-2024-48227

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

CVE-2024-57490: Improper Authentication

Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw...

PT-2025-12418

Name of the Vulnerable Software and Affected Versions iOffice20 versions affected versions not specified Description The issue is related to a logical flaw in the user login system, allowing an attacker to log in to any system account, including the system administrator. Recommendations At the...

Logic flaw in Funadmin

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

GHSA-R9V5-Q97M-RJ5G Logic flaw in Funadmin

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

CVE-2024-48227

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

CVE-2024-48227

Funadmin version 5.0.2 is susceptible to a Denial of Service (DoS) vulnerability due to a logical flaw in the Curd one-click command deletion function . Specifically, an attacker can exploit the getSystemTable and Delete methods within the common.php file to delete critical commands, thereby disr...

CVE-2024-48227

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

CVE-2024-48227: Undefined Security Weakness

Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service DOS...

CVE-2024-44337

A flaw was found in the github.com/gomarkdown/markdown Golang library. There is a logical problem with the paragraph function of the parser/block.go file. This flaw allows a remote attacker to trigger a denial of service DoS by providing a specially crafted input, causing an infinite loop...

WS-2024-0013

A logical flaw in the pgcron extension allows low-privileged users with ownership over pgcron's job table or ability to change the value of cron.databasename to run arbitrary SQL queries as any user including superusers. This is also possible if superuser jobs are explicitly disabled. An attacker...

Design/Logic Flaw

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

Insecure Direct Object Reference

nextjs is vulnerable to Insecure Direct Object Reference Vulnerability. The vulnerability is due to a logical flaw within the auth function in the App Router, and getAuth within the Pages Router. This issue can be exploited by an attacker to gain unauthorized access or conduct privilege escalatio...

Design/Logic Flaw

Home assistant is an open source home automation. The audit team’s analyses confirmed that the redirecturi and clientid are alterable when logging in. Consequently, the code parameter utilized to fetch the accesstoken post-authentication will be sent to the URL specified in the aforementioned...

Denial of service

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...