PT-2026-37147

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.9 Description Several administrative operations within the preferences module are executed via GET requests without CSRF token validation. This allows an attacker to force an authenticated administrator to trigger...

EyouCMS injection vulnerability

EyouCMS is an open-source content management system CMS developed by Eyou Corporation in China, based on ThinkPHP. EyouCMS versions 1.7.9 and earlier have a vulnerability related to injection attacks. This vulnerability arises from improper handling of the editFile function in the file...

Filesystem MCP Server path traversal vulnerability

The Filesystem MCP Server is a context-based protocol developed by Manan Sharma, which provides comprehensive access and manipulation of the file system. Version 1.0.0 of the Filesystem MCP Server contains a path traversal vulnerability. This vulnerability stems from improper handling of the...

PrestaShop Version Hunter

psversionhunter.py fingerprints a PrestaShop installation by comparing the versions of its native modules against the module versions bundled with a known PrestaShop release tag. This is useful when a target does not expose the PrestaShop core version directly but still exposes native module...

CVE-2026-2810: Out-of-bounds Read

Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an out-of-bounds read within a driver, leading to a Blue-Screen-of-Death BSOD. Successful...

Linux kernel DoS

The vulnerability of the functions pciinitafu and cxlpciinitadapter in the drivers/misc/cxl/pci.c module of the Linux kernel is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Bitrix24 CMS Code Execution

Vulnerability of the landing module of the Bitrix24 business management service for content management systems CMS: Website management is related to incorrect handling of file names used in PHP functions like include or require. Exploiting this vulnerability allows a malicious actor to execute...

Linux kernel padata_do_parallel Heap Buffer Overflow DoS

The vulnerability of the padatadoparallel function in the kernel/padata.c module of the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel Data Compromise

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SCSI Device Driver Heap Buffer Overflow DoS

The vulnerability of the raidcomponentadd function in the drivers/scsi/raidclass.c module of the Linux SCSI device driver is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel module Heap Buffer Overflow DoS

The vulnerability of the vxlanflagattrerror function in the Linux kernel module is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the rt6nlmsgsize function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

Intec-Core Module Code Execution

The vulnerability of the Intec-Core module of the INTEC Universe software suite is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the sc7180lpassinit function in the sound/soc/qcom/lpass-sc7180.c sound support module of the Linux operating system’s SoC kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

mt8183_mt6358_ts3a227_max98357_dev_probe Heap Buffer Overflow Do

The vulnerability of the mt8183mt6358ts3a227max98357devprobe function in the sound/soc/mediatek/mt8183/mt8183-mt6358-ts3a227-max98357.c sound-related module of the Linux operating system’s SoC kernel is associated with errors during link counter updates. Exploiting this vulnerability can allow an...

Linux Kernel xfrm_update_ae_params Heap Buffer Overflow DoS

The vulnerability of the xfrmupdateaeparams function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel RAID10 Handle Discard Buffer Overflow DoS

The vulnerability of the raid10handlediscard function in the drivers/md/raid10.c module of the Linux device driver for multiple devices RAID and LVM is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel CIFS Crypto DoS

The vulnerability of the cifscryptosecmechrelease function in the fs/smb/client/cifsencrypt.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Unicode Function Use-After-Free

The vulnerability of the udfnamefromCS0 function in the fs/udf/unicode.c module of the Linux kernel file system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the errorcontext function in the arch/x86/kernel/cpu/mce/severity.c module, part of the Linux kernel support for x86 processors, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to trigger a service failure...