CVE-2026-68083 ksmbd: fix path resolution in ksmbd_vfs_kern_path_create

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...

PT-2026-69484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd component where the ksmbd vfs kern path create function fails to properly root the create, mkdir, and hardlink sinks. While SMB2 open lookups are rooted at t...

JLSEC-2026-1205 libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl...

libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to a logical error in the...

CVE-2026-19230

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2026-19230

CVE-2026-19230 affects SourceCodester Photo Share Website 1.0, specifically the file /social/ajax.php?action=save_upload in the Comment Input Box component. The vulnerability is Cross-Site Scripting (XSS) caused by manipulation of the input argument content. Attackers may exploit this remotely, a...

CVE-2026-19230 SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

EUVD-2026-54572

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2026-19230

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2026-19211

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

CVE-2026-19210

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=saveupload. Such manipulation of the argument img/imgName leads to unrestricted upload. The attack may be launched remotely. The exploit has be...

CVE-2026-19209

A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...

CVE-2026-19211 SourceCodester Photo Share Website ajax.php signup sql injection

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

CVE-2026-19211

The CVE-2026-19211 entry applies to SourceCodester Photo Share Website 1.0. Affected component: the signup path, specifically /social/ajax.php?action=signup. Vulnerability: SQL injection triggered by manipulating the email argument, enabling remote exploitation. Public exploit exists. Impact indi...

CVE-2026-19210

The CVE-2026-19210 vulnerability affects SourceCodester Photo Share Website 1.0, specifically the file /social/ajax.php?action=save_upload. The issue arises from manipulation of the arguments img[]/imgName[], which can lead to an unrestricted file upload. This could allow remote attackers to uplo...

CVE-2026-19210 SourceCodester Photo Share Website ajax.php save_upload unrestricted upload

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=saveupload. Such manipulation of the argument img/imgName leads to unrestricted upload. The attack may be launched remotely. The exploit has be...

CVE-2026-19210

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=saveupload. Such manipulation of the argument img/imgName leads to unrestricted upload. The attack may be launched remotely. The exploit has be...

EUVD-2026-54511

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file /social/ajax.php?action=saveupload. Such manipulation of the argument img/imgName leads to unrestricted upload. The attack may be launched remotely. The exploit has be...

CVE-2026-19209 SourceCodester Photo Share Website index.php home cross site scripting

A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...

CVE-2026-19209

SourceCodester Photo Share Website 1.0 contains a cross-site scripting (XSS) flaw in the unknown function handling the Comment argument of /social/index.php?page=home. The flaw can be triggered remotely, and an exploit has been published. The connected sources confirm the vulnerability, its locat...

CVE-2026-19209

A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...