CVE-2026-96886: Exposure of Sensitive Information to an Unauthorized Actor

The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, email address and billing address of every customer who has booked a course...

PT-2026-103019

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save enrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

ROS-20260930-73-0003

The vulnerability of the asyncsetregisters function in the drivers/net/usb/rtl8150.c file of the Linux kernel’s USB network adapter driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-102912: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

PT-2026-103018

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date start/date end leads to sql injection. Remote exploitation of the attack is possible. The exploit...

PT-2026-103014

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer 0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument test id results in sql injection. The attack can be...

CVE-2026-103056: Improper Neutralization of Special Elements used in an OS Command

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

Linux Distros Unpatched Vulnerability : CVE-2026-102831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5....

PT-2026-102966

Name of the Vulnerable Software and Affected Versions AiSOC versions 7.2.0 through 11.x Description The actions service contains a flaw when building CrowdStrike Real Time Response command strings by interpolating unescaped action parameters within crowdstrike rtr.py and endpoint.py. Authenticate...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DST / SST

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-18318, CVE-2026-17484, CVE-2026-17487 in Dedicated Service Tools DST / System Service Tools SST as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18318 DESCRIPTION: IBM i could allow a remote...

CVE-2026-97950

A flaw was found in the Linux kernel's configfs filesystem. A local user could exploit a race condition between creating a symbolic link and deleting its target directory to cause a Denial of Service DoS. When this race condition occurs, the kernel attempts to access a freed directory entry, whic...

CVE-2026-97947

A flaw was found in the Linux kernel's x86 AMD node component, which may lead to a Denial of Service DoS. If initialization of the AMD System Management Network SMN interface fails, exported read and write functions remain accessible without validating that internal device structures were...

CVE-2026-97946

A flaw was found in the Linux kernel. Improper reference counting during AMD PCI root device initialization and caching in the amdsmninit function fails to properly track device lifecycles. Under certain conditions, this flaw may allow a local attacker to cause a Denial of Service DoS or system...

Malicious code in queeuees (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f793adc7f1d26294831307abed18a284d7834d8e4733a8b05d9863bf2d70c60d Queeuees 0.0.1 ships two top-level packages, Queeuees and Queues, with byte-identical init.py files. Each init.py assembles a byte blob from...

CVE-2026-76736

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

CVE-2026-76721

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the...

CVE-2026-100295

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access...

CVE-2026-97487

A flaw was found in the Linux kernel's Journaled File System JFS. An unhandled error when initializing the file system block size during mount operations allows a local user with mount privileges to cause a Denial of Service DoS. By attempting to mount an incompatible or crafted storage volume, a...

CVE-2026-97485

A flaw was found in the Linux kernel's Optimized MPEG File System OMFS driver. The driver does not properly handle failures when configuring block sizes during file system mounting. A local attacker with the ability to mount a crafted file system image could exploit this flaw to trigger a kernel...

CVE-2026-97927

A flaw was found in the Linux kernel's Unix File System UFS implementation. This vulnerability allows a local user to cause a Denial of Service DoS by mounting a specially crafted or corrupted file system image. During a failed mount operation, an improper cleanup sequence leads to a null pointer...