Stirling-PDF SSRF via Markdown

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

CVE-2026-68098

A flaw was found in ksmbd, a Linux kernel module. The setntacldacl function, which processes Discretionary Access Control Lists DACLs, can stop copying Access Control Entries ACEs prematurely due to a size accounting overflow. This can cause a subsequent deduplication process to read beyond the...

Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service...

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

DEBIAN-CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-28386 Vulnerability Details CVEID:CVE-2026-28386 DESCRIPTION: Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES suppo...

Fedora 44 : knot (2026-6f4584d9b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f4584d9b3 advisory. new upstream release including a security fix for ACL processing Tenable has extracted the preceding description block directly from the Fedora security...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

CVE-2026-18503

CVE-2026-18503 affects Python’s csv.Sniffer.sniff() when fed attacker-controlled, unbounded CSV input. The dialect sniffing process can trigger super-linear regular-expression work, leading to significant CPU consumption. The issue is triggered during normal operation of csv.Sniffer.sniff() with ...

CVE-2026-68425

In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response is matched to an outstanding send. The normal match happens later, aft...

CVE-2026-68425

CVE-2026-68425 in the Linux kernel relates to IB/mad RMPP receive processing. Previously, DATA responses could begin reassembly before being matched to an outstanding send, allowing an unsolicited response that routes to a kernel RMPP agent to allocate or extend RMPP receive state before full TID...

CVE-2026-68330

CVE-2026-68330 affects the Linux kernel component for net: airoha mailbox buffers. The issue arises because airoha_npu_send_msg() always maps with DMA_TO_DEVICE, while some callers rely on the NPU to write responses back into the same buffer. On non-cache-coherent systems (e.g., EN7581 Cortex-A53...

CVE-2026-68309

The vulnerability CVE-2026-68309 affects the Linux kernel driver for wifi mt76 (Connac) and fixes a NULL-pointer dereference in mt76_connac_mcu_uni_bss_he_tlv(). The root cause is that mt76_connac_get_he_phy_cap could return NULL, and the code may dereference the cap pointer without checking. A p...

CVE-2026-68265

The CVE-2026-68265 entry concerns the Linux kernel DRM XE VM: a prefetch of a BO region (DRM_XE_CONSULT_MEM_ADVISE_PREF_LOC) could be treated as an index into region_to_mem_type[], with the value -1 causing an out-of-bounds access. The fix resolves the preferred BO VMAs location directly: local V...

EUVD-2026-55338

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset prereset only force-completes fences of MAPPED queues. A queue in any other state e.g. mid-eviction keeps its lastfence pending; after a GPU reset that fence never...

CVE-2026-68208

The CVE concerns the Linux kernel code in media: TI: VPE. In vip_probe_slice(), the error handling for devm_kzalloc() used PTR_ERR_OR_ZERO(), which incorrectly returns 0 on NULL and fails to signal allocation failure. The vulnerability is addressed by returning -ENOMEM when devm_kzalloc() fails. ...