Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fixed handling of PTE markers in hugetlbchangeprotection The patch series “mm/hugetlb: uffd-wp fixes for hugetlbchangeprotection”. While testing virtio-mem and background snapshots using uffd-wp on hugetlb in QEMU, I...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validated user queue size constraints. Added validation to ensure that user queue sizes meet hardware requirements: - The size must be a power of two for efficient ring buffer wrapping. - The size must be at least...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: ipa: Fixed the issue where the event ring index was not properly programmed for IPA v5.0+. For IPA v5.0+ onwards, the event ring index field has been moved from CHCCNTXT0 to CHCCNTXT1. In IPA v5.0, this field was intended to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protecting of L2 SPTEs in TDP MMU when clearing dirty status Check kvmmmupageadneedwriteprotect when deciding whether to write-protect or clear D-bits on TDP MMU SPTEs. This ensures that the TDP MMU takes into...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bnxten: The bdcnt field in the TX BD must be properly masked. The bdcnt field in the TX BD specifies the total number of BDs for the TX packet. This field consists of 5 bits, and the maximum supported value is 32, with the value ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parsedurablehandlecontext unconditionally assigns dhinfo-fp-conn to the current connection when handling a DURABLEREQV2 context with SMB2FLAGSREPLAYOPERATION...

CVE-2026-24213

creationtimestamp| type| source ---|---|--- 2026-05-20 05:06:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb52im2xs2i 2026-05-20 19:07:57+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmcm2bqg2p2o 2026-06-22 00:19:52+00:00| seen|...

CVE-2026-9003

creationtimestamp| type| source ---|---|--- 2026-05-20 05:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmb4qkmgp42q 2026-05-20 05:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb5dh26ks2t 2026-09-29 12:47:19+00:00| seen|...

CVE-2026-31705

creationtimestamp| type| source ---|---|--- 2026-05-20 03:53:30+00:00| seen| https://bsky.app/profile/theresidentmachine.bsky.social/post/3mmayyacd7e2c 2026-05-20 03:53:31+00:00| seen| https://bsky.app/profile/potato.software/post/3mmayyaqujf2y 2026-07-02 05:51:07+00:00| seen|...

CVE-2026-6456

creationtimestamp| type| source ---|---|--- 2026-05-20 03:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaw2wrbuy2w 2026-05-20 05:01:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb4rk65id2h...

CVE-2026-9010 Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'currenturl' and 'username' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL queries. This makes i...

CVE-2026-6072 Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header

The Oliver POS – A WooCommerce Point of Sale POS plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.4.2.6. The plugin protects its entire /wp-json/pos-bridge/ REST API namespace through the oliverposrestauthentication...

CVE-2026-8685 Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter

The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and including, 2.15.16. This is due to insufficient escaping on user supplied parameters and lack of sufficient preparation on the existing SQL query within the...

EUVD-2026-30997

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Orejime allows Cross-Site Scripting XSS. This issue affects Orejime: from 0.0.0 before 2.0.16...

RLSA-2026:19210 Important: gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fixes: gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JP...

CVE-2026-47100

creationtimestamp| type| source ---|---|--- 2026-05-20 00:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmalyaax6t2w 2026-05-20 00:01:27+00:00| seen| https://bsky.app/profile/potato.software/post/3mmalybp2kj2w 2026-05-28 15:00:16+00:00| seen|...

WordPress plugin Infility has a SQL injection vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

Domijn: The Security of Domain Registrars and the Risk of a Domain Name Takeover

Domain names are key assets for organisation. They anchor an organisation's online presence and reputation, and serve as linking pin for web services and, e.g., email. Consequently, a malicious takeover of a domain can lead to significant damages. Organisations register domain names through...

PT-2026-42168

Name of the Vulnerable Software and Affected Versions Twig versions 2.16.x Twig versions 3.9.0 through 3.25.x Description A sandbox bypass exists when using a SourcePolicyInterface. This occurs because a runtime check fails to use the current template source, allowing attackers with template...

PT-2026-42260

Name of the Vulnerable Software and Affected Versions Frappe Learning Management System LMS versions prior to 2.50.1 Description A user with a course editing role can upload a SCORM ZIP package to write files outside the intended directory. SCORM Sharable Content Object Reference Model is a set o...