vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows カーネルの権限昇格の脆弱性 Windows カーネルのヒープベースのバッファオーバーフローにより、ローカルの攻撃者が権限をNT AUTHORITY\SYSTEM に昇格させることが可能です。 📖 概要 CVE-2026-40369 は、Microsoft Windows カーネルコンポーネントに影響を与える 高深刻度 の権限昇格脆弱性です。 この脆弱性は、Windows カーネル内の安全でないメモリ操作に起因し、低権限の認証された攻撃者が脆弱なホスト上で SYSTEM レベルの権限 を取得する可能性があります。Microsoft は...

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

CVE-2026-101053

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101052

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101066 dbgate Archive Link Creation archive.js createLink path traversal

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101066 dbgate Archive Link Creation archive.js createLink path traversal

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

EUVD-2026-88235

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101066

The software dbgate (versions up to 7.3.1 ) is vulnerable to a path traversal vulnerability within the Archive Link Creation component. Specifically, the createLink function in the file packages/api/src/controllers/archive.js fails to properly handle the linkedFolder argument. This flaw allows an...

EUVD-2026-88234

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

CVE-2026-82936

The mH-DEVELOPER smart home module is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies, allowing an attacker on the LAN to send large request bodies that exh...

EUVD-2026-88230

mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...

CVE-2026-82930 Missing Authentication in mH-DEVELOPER

mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...

kernel: perf/core: Detach event groups during remove_on_exec

A flaw was found in the Linux kernel's performance monitoring unit PMU subsystem. This vulnerability occurs when a performance event group leader is removed during process execution, but its associated events siblings remain active and linked to a stale list. This inconsistent state can lead to a...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

kernel: perf: Reject exited events as group leaders

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...

kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update

A flaw was found in the libceph component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free...

CVE-2026-98104

A flaw was found in the Linux kernel's network traffic control u32 classifier clsu32. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS. When the pool of internal identifiers for filters or hash tables is exhausted, the kernel fails to...

CVE-2026-93267

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. During object deallocation, internal resources associated with a Direct Memory Access Handle DMAH may be freed before the handle is removed from resource tracking. A local attacker can exploit this race condition...

CVE-2026-101055

A security flaw in Thinkware U3000 (up to version 1.02.04 ) allows for information disclosure via the GET_STATUS function of the TCP Service component. By manipulating the wifi_info argument, an attacker can remotely execute this attack. An exploit has been released to the public and may be used ...