ROS-20261005-73-0133

The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 스캐너 CKAN DataStore용 SQL 인젝션 스캐너 이 도구는 CKAN DataStore 플랫폼에서 CVE-2026-42031SQL 인젝션 취약점을 탐지하고 검증하는 데 사용됩니다. 📋 기능 ✅ 8가지 자동 검증 쿼리데이터베이스, 테이블, 컬럼 등 ✅ 멀티 타겟 스캐닝도메인 및 IP 지원 ✅ 단일 스레드 모드깔끔하고 안정적인 출력 ✅ CSV로 데이터 덤프테이블당 100행 ✅ 자동 JSON 및 TXT 보고서 ✅ 자동 및 수동 모드유연함 📸 스크린샷 🚀 사용 방법 1. 종속성 설치 pip...

CLEANSTART-2024-UY78524 Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89

Security vulnerability affects the chromium package. Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89...

CLEANSTART-2024-SX62121 Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89

Security vulnerability affects the chromium package. Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89...

CLEANSTART-2024-LB76268 Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90

Security vulnerability affects the chromium package. Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90...

CLEANSTART-2024-DB58731 Insufficient data validation in Dev Tools in Google Chrome prior to 101

Security vulnerability affects the chromium package. Insufficient data validation in Dev Tools in Google Chrome prior to 101...

CLEANSTART-2024-RD68329 Insufficient data validation in Trusted Types in Google Chrome prior to 101

Security vulnerability affects the chromium package. Insufficient data validation in Trusted Types in Google Chrome prior to 101...

CLEANSTART-2024-DD11811 Insufficient data validation in Blink Editing in Google Chrome prior to 101

Security vulnerability affects the chromium package. Insufficient data validation in Blink Editing in Google Chrome prior to 101...

CLEANSTART-2024-IY85305 Insufficient data validation in URL formatting in Google Chrome prior to 103

Security vulnerability affects the chromium package. Insufficient data validation in URL formatting in Google Chrome prior to 103...

CVE-2026-47834

A flaw was found in Spring Data JPA. This vulnerability allows a remote attacker to bypass data validation mechanisms by submitting specially crafted input. This could lead to unauthorized access to limited information and minor disruptions in service availability. Mitigation There is no mitigati...

CVE-2026-56724 Zammad: Incorrect implementation of permission checks in the knowledge base module

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An issue with permission checks in the knowledge base management area has been identified. Under certain conditions, data validation for linked items was not fully enforced. This could have allowed users...

CVE-2026-56724

The web-based open source helpdesk system Zammad is vulnerable to a permission check flaw in the knowledge base management area prior to version 7.0.2 . Due to incomplete data validation for linked items, users with limited read permissions could potentially interact with items outside their assi...

PT-2026-98899

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description An issue with permission checks in the knowledge base management area allows users with limited read permissions to interact with items outside their assigned access scope due to incomplete data...

ROS-20260915-73-0055

The vulnerability of the Reading Mode in Microsoft Edge and Google Chrome browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to bypass the sandbox’s security mechanisms...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in the File System API of Google Chrome prior to version 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: validation of user data in compact ioctl commands. Incorrect user data may cause warnings in i2ctransfer. For example, it may result in no messages being sent at all. Userspace should not be able to trigger such warnings...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nvme-tcp: A NULL pointer dereference was fixed in the nvmettcpbuildpduiovec function. The commit efa56305908b “nvmet-tcp: Fixed a kernel panic when the host sends an invalid H2C PDU length” added bounds checking for the ttag...