2565 matches found
EUVD-2026-76362
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasddefaulterppostaction copies the timing and device state from the finished ERP request back to the original request but drops procbytes. A request that was...
CVE-2026-89456
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Propagate partial completion length across ERP recovery dasddefaulterppostaction copies the timing and device state from the finished ERP request back to the original request but drops procbytes. A request that was...
CVE-2026-81010 io_uring/waitid: honor task_work cancellation
In the Linux kernel, the following vulnerability has been resolved: iouring/waitid: honor taskwork cancellation iowaitidcb may run through the fallback taskwork path when taskworkadd can no longer queue work to the originating task. The fallback runs from a kworker and iouring marks such task wor...
CVE-2026-86809
The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained...
CVE-2026-86809
The Persian Elementor WordPress plugin, versions 2.7.10 through before 2.8.2 , fails to verify that the payment authority returned in its ZarinPal payment callback belongs to the specific transaction being completed. This allows unauthenticated attackers to complete a pending order by replaying a...
EUVD-2026-76040
The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained...
CVE-2026-86809: Insufficient Verification of Data Authenticity
The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained...
PT-2026-89839
The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained...
PHP omni-completion module runtime/autoload/phpcomplete.vim Code Execution
The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module of the runtime/autoload/phpcomplete.vim text editor in Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vim omni-completion Code Execution
The vulnerability of the Python omni-completion mechanisms for runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim in the Vim text editor involves the integration of functionality from an unreliable source. Exploiting this vulnerability allows a remote attacker to execute...
C omni-completion module Code Execution
The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-89480: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvmetcprecvdata completes a request once the current C2HData PDU has been consumed. Nothing compares the total bytes received against the length the command asked for: struct...
PT-2026-96500
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvme tcp recv data completes a request once the current C2HData PDU has been consumed. Nothing compares the total bytes received against the length the command asked for:...
Python omni-completion module autoload Code Execution
The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...
PT-2026-90172
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the s390/dasd component where the dasd default erp postaction function fails to copy the proc bytes variable from a finished Error Recovery Procedure ERP request back to t...
EUVD-2026-75178
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint...
CVE-2026-59185
identrail's GitHub App connection-completion endpoint binds a fully client-supplied "installationid" to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installation...
CVE-2026-87994
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the channel branch of chatcompletion in backend/openwebui/main.py checked channel write access and channel membership for a supplied messageid but did not verify that the calling user...
CVE-2026-73073
A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...