CVE-2026-101105 code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...

CVE-2026-98161

A flaw was found in the Linux kernel's persistent memory pmem subsystem. When processing storage write requests, the driver continues copying data even if a preceding cache flush operation fails, potentially overwriting the error status and reporting success. A local user performing I/O operation...

CVE-2026-97519

A flaw was found in the Linux kernel's Intel Xe graphics driver. When device core dump cleanup routines are triggered without a completed capture, the driver attempts to access uninitialized snapshot data. A local user could exploit this issue to cause a null pointer dereference, resulting in a...

kernel: RDMA/rxe: Fix double free in rxe_srq_from_init

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe driver. An error in the rxesrqfrominit function's memory management can lead to a double free vulnerability. This occurs when an attempt to copy data to user space fails, causing the sam...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

EUVD-2026-88402

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state...

CVE-2026-101102

A vulnerability exists in deepseek-ai deepseek-harness (versions up to 0.1.0-rc.7 ) within the Code Mode Sandbox component. Specifically, the run_code function is susceptible to manipulation, leading to a sandbox issue that can be triggered via a remote attack . Notably, the vendor's own document...

CVE-2026-101102 deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox

A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function runcode of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state...

CVE-2026-98160

A flaw was found in the Linux kernel's rtl8723bs wireless driver. During device initialization error handling, allocated memory is released using an incompatible deallocation routine. A local attacker could exploit this condition during driver initialization failures to cause memory corruption,...

CVE-2026-97518

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. The subsystem fails to reject duplicate cipher suite entries during wireless device registration. This flaw allows a local user to cause an array buffer overflow within the Wireless Extensions WEXT compatibility...

CVE-2026-97517

A flaw was found in the Linux kernel's nl80211 wireless configuration interface. This flaw can lead to a Denial of Service DoS caused by an out-of-bounds memory read when processing wireless beacon settings. The kernel fails to validate that the variable-length portion of a High Efficiency HE...

CVE-2026-54675 FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

EUVD-2026-88381

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...

CVE-2026-101100

A flaw exists in the ag-ui-protocol ag-ui component affecting versions up to 2026-09-07 . The vulnerability is located in the FilterToolCallsMiddleware function within the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the Middleware component. Specifically, executing...

CVE-2026-101100 ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...

CVE-2026-101100 ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...

CVE-2026-98157

A flaw was found in the Linux kernel's Error Detection and Correction EDAC subsystem. The sysfs interface for device polling improperly validated input values when configuring the polling interval, allowing integer truncation and zero-delay settings. A local user with write permissions to the...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-101082

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-101098

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...