1289 matches found
St. Joe ERP system - SQL Injection
A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...
CVE-2026-123011
STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded...
EUVD-2026-117324
STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded...
CVE-2026-123011
STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded...
CVE-2026-123011
The st-mems-android-linux-sensors-hal component by STMicroelectronics, in versions prior to 7bdf334 , is vulnerable to an improper validation of specified quantity (CWE-1284). The software fails to verify if the number of channels requested exceeds the allowed limit. This could lead to low integr...
sagemcom-fast-3890-exploit
Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the static middleware in middleware/static.go. An attacker can cause a file under a guarded route to be served by sending a double-encoded traversal path, such as /..%252fsecret.txt, when the Static middleware is...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the static middleware in middleware/static.go. An attacker can cause a file under a guarded route to be served by sending a double-encoded traversal path, such as /..%252fsecret.txt, when the Static middleware is...
SUSE CVE-2026-99156
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
DEBIAN-CVE-2026-99156
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
CVE-2026-99156
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
AZL-111296 CVE-2026-99156 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
UBUNTU-CVE-2026-99156
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
EUVD-2026-111908
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
CVE-2026-99156 scsi: st: Fix use-after-free race between st_remove() and st_open()
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
CVE-2026-99156 scsi: st: Fix use-after-free race between st_remove() and st_open()
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
CVE-2026-99156
The Linux kernel is vulnerable to a use-after-free race condition in the scsi: st component due to a flaw in how references are dropped during tape removal. Specifically, st_remove() drops the probe reference via kref_put() before removing its index from st_index_idr. If this was the final refere...
CVE-2026-99156
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
CVE-2026-99156: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between…
In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...
ST Engineering iDirect iQ200 4.5.2.1 Local Privilege Escalation
ST Engineering iDirect iQ-Series, 3315-Series, and 9-Series terminal versions through 4.5.2.1 contain a local privilege escalation via unauthenticated Redis IPC keys that cause sysmngr to execute an attacker-controlled script as root. https://packetstorm.news/download/238033...