PT-2026-61492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver where the iwl mld tx from txq function fails to check the mld-fw status.in hw restart flag before dequeuing frames from mac80211 and pushing them to...

CVE-2026-64169: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error...

PT-2026-61469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A latent bug exists in the IOMMU Input-Output Memory Management Unit subsystem when iommu debug is enabled. The issue occurs during the map error flow where iommu unmap is called,...

PT-2026-61136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the f2fs read data large folio function can maintain a read bio across multiple readahead folios. If a subsequent folio encounters an error...

PT-2026-61270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the migrate vma insert huge pmd page function. When a PMD Page Middle Directory check fails and the process jumps to unlock abort, the pag...

CVE-2026-64152: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommudebug is enabled Sashiko noticed a latent bug where the map error flow called iommuunmap which calls iommudebugunmapbegin/iommudebugunmapend however since this is an error path the map flow nev...

PT-2026-61478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the icssm prueth probe function within the net: ti: icssm-prueth component. The issue arises when of property read u32 fails, causing the function to return witho...

PT-2026-61396

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the netfilter x tables component. The arp/ip6t register table function adds a table to the per-netns list via xt register table before allocating the per-net...

PT-2026-61377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the netfs write begin function during error handling. Specifically, the system fails to release the reference to the request when an error is returned from the...

PT-2026-61465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pds core component where the pdsc devcmd wait function fails to correctly handle errors, potentially returning a stale success status from the completion register...

PT-2026-61101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nfsd4 create file function contains two issues related to Access Control List ACL handling. First, the return value of the nfsd4 acl to attr function is ignored. If the conversion fr...

APEX_FRAMEWORK

ApexFramework A high-performance Ruby-based framework for sec...

CVE-2026-57857

The Flow Payment plugin for WordPress (flow.cl) v3.0.8 is affected by a reflected cross-site scripting (XSS) on the WooCommerce checkout page. The vulnerability arises because error_message from an order-cancellation flow is passed directly to wc_add_notice() in flowpayment-fl.php (lines 57–58) w...

EUVD-2026-45400

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

CVE-2026-57857 Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message Parameter

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

CVE-2026-57857 Flow Payment Plugin for WordPress Reflected Cross-Site Scripting via error_message Parameter

The Flow Payment plugin for WordPress flow.cl version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an order cancellation, the errormessage GET parameter is passed directly to wcaddnotice in flowpayment-fl.php lines 57-58 without...

Exploit for CVE-2026-63030

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-202...

Use of Incorrectly-Resolved Name or Reference

Overview Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the extractBin function in the file internal/tools/execapproval.go. An attacker can cause incorrect name resolution by manipulating input to this function, potentially leading to...

CVE-2024-58361

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error...

CVE-2024-58366

SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges...