Brave CMS 安全漏洞

Brave CMS is a blog and news content management system developed by Razvan Zamfir. Versions of Brave CMS prior to 2.0.6 contained security vulnerabilities. These vulnerabilities stemmed from an insecure direct object reference in the article image deletion function, which could allow authenticate...

CVE-2026-31408

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold scorecvframe reads conn-sk under scoconnlock but immediately releases the lock without holding a reference to the socket. A concurrent close can free the...

PT-2026-30576

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a use-after-free issue in the sco recv frame function within the Bluetooth SCO Synchronous Connection-Oriented subsystem. The function reads conn-sk under sco...

MINI-MM75-G8VH-J5R4

Bulletin has no description...

MINI-R64X-MHJM-P9W3

Bulletin has no description...

MINI-Q66W-F7X6-GRQH

Bulletin has no description...

MINI-HQGJ-W9JW-HX2F

Bulletin has no description...

MINI-M899-QJH2-G987

Bulletin has no description...

MINI-47XC-CP6V-542P

Bulletin has no description...

MINI-3J8J-829C-3V77

Bulletin has no description...

MINI-PG4P-8P25-256H

Bulletin has no description...

CVE-2026-4896

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...

MINI-RM42-6533-33R6

Bulletin has no description...

MINI-V337-MR4V-R68F

Bulletin has no description...

MINI-J72V-2PHG-G3H3

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-23436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops pre- callbacks and take a ref to it. Then later in the body ...

ECHO-5DE4-11C3-45F3

Bulletin has no description...

MINI-QF84-6C97-696V

Bulletin has no description...

MINI-Q86Q-5RFC-CF5C

Bulletin has no description...

EUVD-2026-18981

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...