Benjamin Larsson rtl_433 buffer error vulnerability

In RTL433 versions 21.12 through 25.12, there is a buffer error vulnerability stemming from a stack buffer overflow in the proflame2mc function. Sending more than seven valid Manchester encoding bytes can cause the stack buffer to be overwritten beyond its 7-byte limit. Attackers can exploit this...

Zephyr Project Zephyr buffer error vulnerability

Versions Zephyr 2.2.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the GPIO system call handler in drivers/gpio/gpiohandlers.c fails to validate the pin parameter provided by user-mode callers; this may result in out-of-bounds writes of function pointers a...

WordPress Clean Login authorization issue vulnerability

WordPress Clean Login versions 1.20.1 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of permission checks in the CleanLoginShortcode::getpageswithshortcodes function, which is hooked into the savepost action. As a result, authenticated attackers wit...

Ultralytics code injection vulnerability

Version 8.4.65 of Ultralytics contains a code injection vulnerability. This flaw arises because the parsemodel function fails to properly validate user-supplied strings before using them to execute Python code. As a result, remote attackers can exploit this to access malicious pages or open...

WordPress IvyForms arbitrary file upload vulnerability

WordPress IvyForms versions 1.5.1 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from insufficient file type validation in the filterFiletypeAndExt function; it lacks a list of prohibited extensions and overrides WordPress’s built-in MIME and extension...

Zephyr Project Zephyr buffer error vulnerability

Versions Zephyr 4.1.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the ethernetfillheader function selects whether to add an Ethernet header locally based solely on configuration values at build time; it fails to verify whether the packet has sufficient...

Pie Register Premium arbitrary file upload vulnerability

Versions 3.8.4.0 and earlier of Pie Register Premium contain an arbitrary file upload vulnerability. This vulnerability arises because the pieregfileupload function fails to validate calls to file type checks, and the AJAX handler lacks nonce validation or permission checks. As a result,...

PT-2026-127789

A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web core/src/v0 9/state/data-model.ts. Executing a manipulation can lead to resource consumption. It is possible to launch the attack remotely. The exploit h...

CVE-2026-118579: D-Link DIR-505: A weakness has been identified in D-Link DIR-505 1.10B02

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The...

CVE-2026-118273: a2ui-project a2ui: A flaw has been found in a2ui-project a2ui up to 0.10.6

A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/webcore/src/v09/state/data-model.ts. Executing a manipulation can lead to resource consumption. It is possible to launch the attack remotely. The exploit has...

CVE-2026-99186: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in…

In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 "x86/insn: Simplify foreachinsnprefix" made foreachinsnprefix declare its own loop counter named idx. getsegregoverrideidx keeps its result in ...

PT-2026-129068

PostgreSQL Anonymizer's anon.image blur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on...

PT-2026-127801

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the upload image function. This is due to insufficient file type validation in upload image due to a weak Content-Ty...

PT-2026-128178

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transaction handling For a split transaction, either fw core handle response or split transaction timeout callback may manipulate the same transaction entry in the pending transaction...

CVE-2026-99185: Linux: In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split…

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transaction handling For a split transaction, either fwcorehandleresponse or splittransactiontimeoutcallback may manipulate the same transaction entry in the pending transaction list. T...

CVE-2026-99138: Linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in…

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in dotcpgetsockoptTCPCCINFO dotcpgetsockopt reads icsk-icskcaops and dereferences the getinfo function pointer without rcureadlock. With BPF structops congestion control, caops can point to dynamically...

CVE-2026-106013: artbees Jupiter X Core: The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler…

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

CVE-2026-118606: Exposed Dangerous Method or Function

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The...

ggml llama.cpp buffer error vulnerability

Versions prior to b11865 of ggml llama.cpp contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds write in the ggml-rpc RDMA transport’s rdmarecv function. Unauthenticated peers can exploit this by sending HELLO messages to declare their RDMA capabilities; they may...

PT-2026-127312

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify twitter callback function because after exchanging the visitor's oauth verifier for their...