EUVD-2026-67772

An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...

PT-2026-82891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where corrupted xattr entries are not properly handled. The f2fs listxattr function fails to validate the xattr entry before reading its fields,...

The vulnerability in the `init_kfd_vm()` function of the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c driver, a component of the AMD GPU kernel for Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the initkfdvm function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to situations where there is a competition for context switching. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the rpcrdma_post_recvs() function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmapostrecvs function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation is related to incorrect resource initialization. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the icmp_build_probe() function in the net/ipv4/icmp.c module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the icmpbuildprobe function in the net/ipv4/icmp.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the parse_stream() function in the Expat.xs component of the libxml-parser-perl library allows a attacker to cause a denial-of-service attack.

The vulnerability of the parsestream function in the Expat.xs component of the libxml-parser-perl library is related to the escape character being output outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the QuerySet.order_by() function in the Django web application framework allows a hacker to gain access to confidential data and influence the integrity of the data.

The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise data integrity...

The vulnerability of the lasso_node_init_from_message_with_format function in the Lasso library, which stems from improper memory release before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the lassonodeinitfrommessagewithformat function in the Lasso library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the aml_sfc_dma_buffer_setup() function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the madvise_args_are_sane() function in the drivers/gpu/drm/xe/xe_vm_madvise.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to access protected information or cause a service failure.

The vulnerability of the madviseargsaresane function in the drivers/gpu/drm/xe/xevmmadvise.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the lib/nghttp2_session.c component, part of the HTTP/2 implementation by Nghttp2, allows a attacker to cause a service failure.

The vulnerability of the lib/nghttp2session.c component in the HTTP/2 implementation of Nghttp2 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-51616

CVE-2026-51616 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getWanIeCfg function allows an unauthenticated remote attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve LAN addressing and DHCP configuration i...

CVE-2026-51664

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51656

Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain VPN pass-through and WAN ping filter settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51610

Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to arbitrarily force an immediate reboot via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-38636

An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-51617

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...

CVE-2026-51628

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51625

Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...