CVE-2026-23835

CVE-2026-23835 affects Lobehub/LobeHub prior to 1.143.3, where the file upload endpoint (file.createFile) does not validate request integrity, enabling an attacker to intercept and modify upload parameters, create arbitrary files in unintended paths, and misreport file sizes to bypass storage quo...

CVE-2026-23835

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitra...

CVE-2026-1684

A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function HandleReports of the file /internal/context/pfcpreports.go of the component PFCP UDP Endpoint. The manipulation results in denial of service. The attack can be executed remotely. It is advisable to...

PT-2026-5439

Name of the Vulnerable Software and Affected Versions LobeHub versions prior to 1.143.3 Description LobeHub is an open source human-and-AI-agent network. The file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and...

CVE-2026-21965

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000938 advisory. Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service double free or...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000543 advisory. The apicgettmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service...

CVE-2021-2218

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft component: Health Center. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpris...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the xemigratecopy function in the drivers/gpu/drm/xe/xebo.c module of the DRI support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-199965

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the mmksmzeropages function in the include/linux/ksm.h module of the Linux operating system’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the edmasetupfromhw function in the drivers/dma/ti/edma.c module of the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2025-61762

Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft component: Payables. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables...

EUVD-2021-15755

Malware in sbrugna...

EUVD-2020-29912

Malware in sbrugna...

EUVD-2024-19266

Malicious code in bioql PyPI...

EUVD-2024-2915

Malicious code in bioql PyPI...

CVE-2025-27262

Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges...

CVE-2025-27262

CVE-2025-27262 summary (normal mode) : Ericsson Indoor Connect 8855 is affected by a command injection vulnerability in its handling of OS commands, enabling an attacker with local access to achieve privilege escalation. The CVSS basis metrics indicate a high-severity, local, low-exploitability-c...

PT-2025-39394

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a command injection issue that, if exploited, could result in a loss of data integrity and confidentiality. This could lead to the unauthorized...