CVE-2026-93749: Improper Validation of Specified Quantity in Input

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-12954: Improper Input Validation

The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including, 1.23.0 via the myprofileupdate function. This is due to the function performing no nonce verification, no capability check, and no allowlist validation on the meta key supplie...

DEBIAN-CVE-2026-93174

In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copymapvaluelong In kernel, per-CPU map elements are stored with roundupmap-valuesize, 8 bytes. On UAPI lookup paths, it copies the rounded size for each CPU into a temporary buffer. However...

EUVD-2026-82282

In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copymapvaluelong In kernel, per-CPU map elements are stored with roundupmap-valuesize, 8 bytes. On UAPI lookup paths, it copies the rounded size for each CPU into a temporary buffer. However...

CVE-2026-66618

Administrator SQL Injection in WP Maps = 4.9.9 versions...

EUVD-2026-81504

Administrator SQL Injection in WP Maps = 4.9.9 versions...

CVE-2026-66618 WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability

Administrator SQL Injection in WP Maps = 4.9.9 versions...

CVE-2026-66618

CVE-2026-66618 is an Administrator-level SQL Injection vulnerability in the WP Maps WordPress plugin, affecting versions 4.9.9 and below . The flaw was discovered by Ananda Dhakal (Patchstack) and carries a CVSS 3.1 score of 7.6 (HIGH) , with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L , indi...

CVE-2026-66618 WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability

Administrator SQL Injection in WP Maps = 4.9.9 versions...

WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Maps versions = 4.9.9...

PT-2026-94970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where per-CPU map elements are stored using a rounded size, but the copy map value long function passes only the map-value size to bpf obj memcpy. Wh...

PT-2026-94270

Administrator SQL Injection in WP Maps = 4.9.9 versions...

CVE-2026-66618: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WP Maps = 4.9.9 versions...

MariaDB-13.0.1-rc-RCE-PoC-Exploit

MariaDB 13.0.1-rc RCE — PoC / Exploit hardened fork Fork of...

CVE-2026-55178: Exposure of Sensitive Information to an Unauthorized Actor

GeoLens is a self-hosted geospatial data catalog with semantic search, OGC and STAC APIs, and a map builder. Prior to 1.2.3, multiple read and link endpoints authorize only the resource named in the request URL and fail to re-authorize a second caller-influenced dataset reached through a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following when showing /proc/cpuinfo. This issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed the overloading of the meaning of MEMUNINIT Lonial reported an issue with the BPF verifier, where the checkmemsizereg function contains the following code: c if !tnumisconstreg-varoff / For unprivileged variable...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: UM: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following, while we display /proc/cpuinfo. This...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIGSCHEDCORE landed during 5.14 cycle, 2-core 2-thread-per-core interAptiv CPS-driven started emitting the following: 0.025698 CPU1 revision is: 0001a120 MIPS...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: mtd: maps: pxa2xx-flash: fixed a memory leak in the probe function. Added “free ‘info’” upon remapping errors to avoid memory leaks. : Reworded the commit log...