CVE-2024-3495-POC

CVE-2024-3495-POC The Country State City Dropdown CF7 WordPress plugin versions up to 2.7.2 is vulnerable to SQL Injection via 'cnt' and 'sid' parameters. Insufficient escaping and lack of preparation in the SQL query allow unauthenticated attackers to append queries, potentially extracting...

CVE-2026-98051

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix txspbringfull checking same slot cnt times The loop initialised nextindex from intf-txspbindex on every iteration, so incrring always produced the same result and only one slot was ever tested. Move the...

CVE-2026-31741

A flaw was found in the Linux kernel's rz-mtu3-cnt counter module. A local user can exploit this by repeatedly writing '0' to the sysfs enable file, which causes the runtime Power Management PM usage count to underflow. This can lead to attempts to access hardware registers with their clocks off,...

CVE-2026-31740

A flaw was found in the Linux kernel's rz-mtu3-cnt counter driver. A race condition exists where multiple sub-drivers can simultaneously attempt to assign their device pointers to a shared channel member. This can result in the counter sub-driver performing power management actions on an unintend...

CVE-2026-31741

In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counter is incremented / decremented each time the sysfs enable file is written to. If user writes 0 to the sysfs enable file multiple times,...

CVE-2026-31740

In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: do not use struct rzmtu3channel's dev member The counter driver can use HW channels 1 and 2, while the PWM driver can use HW channels 0, 1, 2, 3, 4, 6, 7. The dev member is assigned both by the counter drive...

CVE-2026-31741: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counter is incremented / decremented each time the sysfs enable file is written to. If user writes 0 to the sysfs enable file multiple times,...

CVE-2025-71180

CVE-2025-71180 affects the Linux kernel’s interrupt handling: the IRQF_NO_THREAD flag should not be used with code that may take a spinlock, as warned by CONFIG_PROVE_RAW_LOCK_NESTING. The issue occurs when an IRQ handler may either use IRQF_NO_THREAD or acquire a spinlock_t, leading to a potenti...

MAL-2025-15120 Malicious code in autopilot-cnt (npm)

The package autopilot-cnt was found to contain malicious code...

Malicious code in autopilot-cnt (npm)

The package autopilot-cnt was found to contain malicious code...

CVE-2025-22108

In the Linux kernel, the following vulnerability has been resolved: bnxten: Mask the bdcnt field in the TX BD properly The bdcnt field in the TX BD specifies the total number of BDs for the TX packet. The bdcnt field has 5 bits and the maximum number supported is 32 with the value 0...

PT-2025-16748

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the bnxt en component. The issue involves the bd cnt field in the TX BD, which specifies the total number of BDs fo...

PT-2025-2834

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the Linux kernel, specifically the net/smc component. When receiving a proposal message in the server, the fields iparea offset and ipv6 prefixes cnt from the remote client a...

PT-2024-28079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the validation of slices count returned by firmware in the Linux kernel's crypto: qat module. The function adf send admin tl start enables the telemetry feature o...

CVE-2024-3495: Improper Neutralization of Special Elements used in an SQL Command

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

Rocky Linux 8 : wavpack (RLSA-2022:7558)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7558 advisory. - An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function WavpackPackSamples of file src/packutils.c, tainted...

CVE-2021-21909

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

PT-2021-14835

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue allows an attacker to trigger arbitrary file deletion through specially-crafted command line arguments in the del .cnt|.log file delete command...

CVE-2021-21909: Improper Limitation of a Pathname to a Restricted Directory

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

PT-2022-12036

Name of the Vulnerable Software and Affected Versions Wavpack version 5.4.0 Description An out of bounds read issue was discovered in the processing of .WAV files. This issue is triggered in the WavpackPackSamples function of the file src/pack utils.c, where the tainted variable cnt is too large,...