Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: The sanitize MFT references function returned by ntfslookup inodebyname has been fixed. ntfslookup inodebyname now returns MFT references that are read from directory index entries on the disk. These values are untrusted...

PT-2026-72376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ntfs lookup inode by name function returns MFT references read from directory index entries on disk. Because these values are untrusted, the function may return an error-marked MFT...

EUVD-2026-38403

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitizemessage helper that strips object-repr memory addresses from error messages before they reach the client, is incomplete: several response paths echo...

GHSA-9CP7-3Q5W-J92G parse-server: Malformed `$regex` query leaks database error details in API response

Impact A malformed $regex query parameter e.g. abc causes the database to return a structured error object that is passed unsanitized through the API response. This leaks database internals such as error messages, error codes, code names, cluster timestamps, and topology details. The vulnerabilit...

eXtreme-fusion 4.02 Fusion_Forum_View.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execu...

Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

Outreach Project ToolOPT is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...