Linux kernel debug_lockres_open Heap Buffer Overflow DoS

The vulnerability of the debuglockresopen function in the fs/ocfs2/dlm/dlmdebug.c component of the Linux kernel is related to the pointer being reclaimed after its validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Function Use-After-Free

The vulnerability of the managdcreatemanawqcq function in the drivers/net/ethernet/microsoft/mana/gdmamain.c file of the Linux kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-111152

Game Music Emu libgme through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader getdata function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via...

PT-2026-115443

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possibl...

DN-Link DIR-868L CGI Handler System Call Code Execution

The vulnerability of the system function in the HNAP CGI Handler component of D-Link DIR-868L router microprogramming software is related to the lack of measures taken at the control level to prevent data corruption. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

Wazuh check_remote_commands() Code Execution Root Privileges

The vulnerability of the checkremotecommands function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...

Wazuh security.update_user() Bypass

The vulnerability of the security.updateuser function on the monitoring and threat detection platform Wazuh is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers operating remotely to bypass existing security mechanisms...

Wazuh MasterHandler Process Files from Worker Code Execution

The vulnerability of the MasterHandler.processfilesfromworker function on the platform for security monitoring and threat detection by Wazuh is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...

Wazuh check_token() Privilege Bypass

The vulnerability of the checktoken function on the security monitoring and threat detection platform Wazuh is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms and gain increased privileges...

PT-2026-115453

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppb add meta to user on activation function. The vulnerabili...

PT-2026-115582

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action also function, plugin, post type, post status, ids, loggedout, and POST post title' parameter in all versions up to, and including, 1.1.5 due to insufficient input...

PT-2026-115632

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

PT-2026-115603

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

PT-2026-116125

A heap buffer overflow in the stbl AddSize function isomedia/stbl write.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-116126

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf parse lfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gf parse lfrac to divide by zero, terminating the process with SIGFPE...

PT-2026-116131

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC DUMP replies to a client application that uses the pmap getmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocatio...