CVE-2026-63970

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtiotransportsendpktinfo allocates or reuses the zerocopy uarg before entering the send loop, but virtiotransportallocskb still fills the skb before it inherits that uarg. Whe...

CVE-2026-63970

CVE-2026-63970 — Linux kernel vulnerability in vsock/virtio where zerocopy skb handling could fail due to allocation order: uarg must be bound before filling the skb to ensure correct lifetime handling. The fix ensures the zerocopy uarg is passed into virtio_transport_alloc_skb() and bound prior ...

CVE-2026-63970 vsock/virtio: bind uarg before filling zerocopy skb

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtiotransportsendpktinfo allocates or reuses the zerocopy uarg before entering the send loop, but virtiotransportallocskb still fills the skb before it inherits that uarg. Whe...

PT-2026-61287

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio transport send pkt info allocates or reuses the zerocopy uarg before entering the send loop, but virtio transport alloc skb still fills the skb before it inherits that...

CVE-2026-53365

CVE-2026-53365 concerns the Linux kernel patch for vsock/virtio zerocopy completion across multi-skb sends. The fix ensures zerocopy uarg is allocated before the send loop and attached to every skb via skb_zcopy_set(), so each skb carries a reference and completion decrements correctly. This prev...

CVE-2026-9469 yashpokharna2555 StudentManagementSystem success.php sql injection

A weakness has been identified in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. The impacted element is an unknown function of the file /success.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. T...

EUVD-2026-21980

A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit is...

PT-2026-32373

Name of the Vulnerable Software and Affected Versions Simple Content Management System version 1.0 Description An issue exists in the login functionality within the file '/web/admin/login.php'. Manipulation of the User argument allows for SQL injection, which is a technique where malicious SQL...

CVE-2026-6029

A vulnerability was detected in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument User results in os command injection. The attack may be launched remotely. Th...

Cisco IOS XR Software CLI Privilege Escalation (cisco-sa-iosxr-privesc-bF8D5U4W)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerabilit...

CVE-2026-2686

A security vulnerability has been detected in SECCN Dingcheng G10 3.1.0.181203. This impacts the function qq of the file /cgi-bin/sessionlogin.cgi. The manipulation of the argument User leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclose...

CVE-2019-2246

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574,...

EUVD-2020-3594

Malware in sbrugna...

EUVD-2003-0266

Malware in sbrugna...

EUVD-2002-0126

Malware in sbrugna...

EUVD-2015-5467

Malware in sbrugna...

EUVD-2019-11888

Malware in sbrugna...

PT-2025-26545 · Unknown · Code-Projects Online Bidding System

Name of the Vulnerable Software and Affected Versions: code-projects Online Bidding System version 1.0 Description: A critical issue affects an unknown part of the file /login.php. The manipulation of the User argument leads to SQL injection. It is possible to initiate the attack remotely. The...

PT-2025-23789 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical vulnerability was found in the CodeAstro Real Estate Management System. The issue affects unknown code of the file /admin/index.php. The manipulation of the User...

CVE-2024-8174

CVE-2024-8174 affects code-projects Blood Bank System 1.0, specifically the Login Page functionality. The vulnerability lies in the login.php page where manipulating the user parameter leads to cross-site scripting. The issue is exploitable remotely, and public disclosure exists. Multiple connect...