User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

EUVD-2026-80595

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: transfer the pmd dirty bit to the folio on zap zaphugepmdfolio propagates the pmd young bit to the folio for the file case, but not the dirty bit. The pte path does propagate it, in zappresentfolioptes and so does...

CVE-2026-89987

CVE-2026-89987 affects the Linux kernel in the mm/huge_memory subsystem. The function zap_huge_pmd_folio() fails to propagate the PMD dirty bit to the folio when a PMD-mapped shmem/tmpfs page is unmapped, unlike the PTE path and PMD split path. This causes silent data loss for processes that stor...

CVE-2023-22518

CVE-2023-22518 Confluence Data Center 和 Server 中的权限分配不当漏洞。 Atlassian 已警告管理员关于 Confluence 中严重漏洞。利用此漏洞可能导致数据丢失，因此开发者建议您立即安装补丁。 请注意，该漏洞无法用于泄露数据，并且不会影响通过 atlassian.net 域名访问的 Atlassian Cloud 站点。 漏洞详情 Atlassian Jira 页面 产品| 受影响版本| 已修复版本 ---|---|--- Confluence Data Center| 所有版本均受影响| 7.19.16 及以上 Confluenc...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2023-22518

CVE-2023-22518 Confluence Data Center および Server における不適切な認可の脆弱性。 Atlassian は、Confluence における重大な脆弱性について管理者に警告しました。この問題を悪用するとデータ損失につながる可能性があるため、開発者はできるだけ早くパッチを適用するよう促しています。 この脆弱性はデータ漏洩には利用できず、atlassian.net ドメイン経由でアクセスする Atlassian Cloud サイトには影響しないことに注意してください。...

kernel: mm/khugepaged: write all dirty file folios when collapsing

A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...

CVE-2026-89558

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb "md/md-bitmap: merge mdbitmapstartsync into bitmapoperations" converted stilldegraded from int to bool, but inverted the assignment in the loop...

CVE-2026-89704

In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async COPY loop nfsdcopyfilerange samples dst-fwberr into "since" after the copy loop, then uses it to detect writeback errors via filemapcheckwberr once vfsfsyncrange returns. Because t...

CVE-2026-89706

In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

CVE-2023-0400

Trellix Data Loss Prevention DLP Bypass https://kcm.trellix.com/corporate/index?page=content&id=SB10394...

Linux Distros Unpatched Vulnerability : CVE-2026-80997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipa: fix stalled modem TX queue after runtime resume ipastartxmit unconditionally stops the TX queue before calling pmruntimeget, relying on the wake...

Linux Distros Unpatched Vulnerability : CVE-2026-89706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the...

Linux Distros Unpatched Vulnerability : CVE-2026-89704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: sample writeback error cursor before async COPY loop nfsdcopyfilerange samples dst-fwberr into since after the copy loop, then uses it to detect writeback...

CVE-2026-89713

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A remote attacker, by sending a crafted file attribute modification request SETATTR while a file is being concurrently appended, could exploit a time-of-check to time-of-use TOCTOU vulnerability. This could lead to the...

CVE-2026-89706

A flaw was found in the Linux kernel's nfsd component. When an asynchronous async copy writeback operation fails, the server's write verifier is not properly reset. This can lead to a client incorrectly assuming that data has been made durable, resulting in the silent loss of data that was intend...

CVE-2026-89704

A flaw was found in the Linux kernel's nfsd component. The nfsdcopyfilerange function incorrectly samples the writeback error cursor after the copy loop. This allows a concurrent write operation to advance the error cursor prematurely. As a result, the system may report that data has been...