GHSA-7RCP-MXPQ-72PJ

creationtimestamp| type| source ---|---|--- 2026-02-18 20:40:39+00:00| seen| https://gist.github.com/alon710/2c65b9c465b98e060e5d00554406c73c...

GHSA-JFV4-H8MC-JCP8

creationtimestamp| type| source ---|---|--- 2026-02-18 20:10:40+00:00| seen| https://gist.github.com/alon710/46d127cf3a2094bb829e405b76bec24c...

GHSA-X22M-J5QQ-J49M

creationtimestamp| type| source ---|---|--- 2026-02-18 19:10:39+00:00| seen| https://gist.github.com/alon710/482912f82ba4201d8ab50a46212af3c4...

GHSA-H9G4-589H-68XV

creationtimestamp| type| source ---|---|--- 2026-02-18 18:40:39+00:00| seen| https://gist.github.com/alon710/844fd31d09ce1f0bffd3bf36057f5d6f...

AZL-77951 CVE-2025-71233 affecting package kernel for versions less than 6.6.130.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

UBUNTU-CVE-2025-71233

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

CVE-2026-23216

creationtimestamp| type| source ---|---|--- 2026-02-18 16:05:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116092483157089542 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...

CVE-2025-71233 PCI: endpoint: Avoid creating sub-groups asynchronously

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

CVE-2025-71233 PCI: endpoint: Avoid creating sub-groups asynchronously

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

CVE-2025-71233

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...

GHSA-J27P-HQ53-9WGC

creationtimestamp| type| source ---|---|--- 2026-02-18 08:10:30+00:00| seen| https://gist.github.com/alon710/e6f79cdbd45ffed4bc877651bc55bea4...

CVE-2026-1937

creationtimestamp| type| source ---|---|--- 2026-02-18 07:20:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4k5rfaio2x 2026-02-18 07:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116090459262209792 2026-02-18 07:30:32+00:00| seen|...

GHSA-Q447-RJ3R-2CGH

creationtimestamp| type| source ---|---|--- 2026-02-18 06:40:30+00:00| seen| https://gist.github.com/alon710/00067d90a2461fbca1a5464c0bbbd63b...

CVE-2026-1368

The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key...

CVE-2026-2023 WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation

The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0. This is due to missing nonce validation in the ajaxsavecustomplugin function, which is disabled by prefixing the check with 'false &&'. This makes it possible for...

GHSA-V6C6-VQQG-W888

creationtimestamp| type| source ---|---|--- 2026-02-18 01:10:31+00:00| seen| https://gist.github.com/alon710/c1dd925bfef757917be700332b8feba8...

CVE-2025-70062

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

PT-2026-20481

PHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery CSRF vulnerability in the 'Add Doctor' module. The application fails to enforce CSRF token validation on the add-doctor.php endpoint. This allows remote attackers to create arbitrary Doctor accounts privileged users ...

PT-2026-20788

Name of the Vulnerable Software and Affected Versions LibreNMS versions 26.1.1 and below Description LibreNMS, an auto-discovering PHP/MySQL/SNMP based network monitoring tool, contains a Stored Cross-Site Scripting XSS issue. The device group name is not sanitized, allowing attackers with admin...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the asynchronous creation of subgroups, potentially leading to null pointer dereferencing...