Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002073 advisory. The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003297 advisory. drivers/vfio/pci/vfiopci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service memory corruption o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002331 advisory. The caifseqpktrecvmsg function in net/caif/caifsocket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003004)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003004 advisory. The sndmsndmidiinputread function in sound/isa/msnd/msndmidi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary acces...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002212 advisory. The dovideosetspupalette function in fs/compatioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002681 advisory. The xenbiovecphysmergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002574 advisory. drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002589 advisory. arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment CS in certain error cases, which allows local users to obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003107 advisory. The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001883 advisory. arch/mips/include/asm/threadinfo.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure TIFSECCOMP checks on the fast system-call path, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001838 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003209 advisory. sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kern...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003308 advisory. security/keys/bigkey.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allow...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002376 advisory. The packetrecvmsg function in net/packet/afpacket.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structur...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002180 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

PT-2026-3115

Name of the Vulnerable Software and Affected Versions Phpgurukul Cyber Cafe Management System version 1.0 Description The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the /add-users.php API endpoint, leading to a stored cross-site...

PT-2026-3114

Name of the Vulnerable Software and Affected Versions Cyber Cafe Management System version 1.0 Description A stored cross-site scripting XSS issue exists. An authenticated attacker can inject arbitrary JavaScript code into the username parameter through the ''/add-users.php'' endpoint. The inject...

CVE-2025-67077

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...

CVE-2025-70892

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003382 advisory. Race condition in the sctpwaitforsndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service assertion...