Ultimate Addons for Contact Form 7 <= 3.5.50 - Arbitrary File Upload

Ultimate Addons for Contact Form 7 UACF7 = 3.5.50 copies every file submitted through a Contact Form 7 uacf7signature field into wp-content/uploads/uacf7-uploads/ with no file-type or extension validation when the PDF Generator module is enabled on the form. An unauthenticated attacker can POST t...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

EUVD-2026-107216

Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled curbufsize == 0, reaches these...

CVE-2026-82210

Apache bRPC versions earlier than 1.18.0 are vulnerable to a Remote Denial of Service (DoS) via a reachable assertion (CWE-617 ). The issue occurs in the streaming feature when the server handles FRAME_TYPE_FEEDBACK frames. Specifically, the Stream::SetRemoteConsumed() function contains assertion...

CVE-2026-82210 Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames

Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled curbufsize == 0, reaches these...

PT-2026-120557

Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled cur buf size == 0, reaches these...

Exact Compilation and Resource Laws for Hidden Integer Feedback

Hidden randomized rounding couples the privacy loss of successive integer releases. We study a rational-feedback mechanism under predictable signed-unit participation and full observation of every physical output. A preparation's lifetime connects three results. First, preserving complete carries...

DEBIAN-CVE-2026-98645

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

CVE-2026-98645

The Linux kernel contains a use-after-free and double free vulnerability in the HID: winwing driver. The issue occurs because winwing_init_ff() passes private data allocated via devm_kzalloc() to input_ff_create_memless(), which then incorrectly frees the pointer using kfree() during teardown. Th...

CVE-2026-98645 HID: winwing: fix use-after-free in force feedback teardown

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

CVE-2026-98645 HID: winwing: fix use-after-free in force feedback teardown

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

CVE-2026-98645

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: iforce processes the force-feedback effect index directly from the device. The iforceprocesspacket function handles a status report packet ID 0x02 by retrieving the force-feedback effect index from the device and using it ...

CVE-2026-110611: Authorization Bypass Through User-Controlled Key

REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or...

PT-2026-114053

Name of the Vulnerable Software and Affected Versions REBUILD versions REBUILD through 4.5.0 Description An authorization bypass exists in the AiBot2Controller /aibot2 endpoints. The system processes a caller-supplied chatid without verifying if the requester owns that ID. This allows authenticat...

honggfuzz

Honggfuzz Un fuzzer evolutivo, orientato alla sicurezza e guidato dal feedback. Honggfuzz è un fuzzer generico che utilizza la copertura del codice basata su software e hardware per trovare bug. È multi-processo, multi-thread e supporta il fuzzing persistente per una velocità estrema...

BIT-GHOST-2026-103285 Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to the feedback page that automatically submits feedback when...

BIT-GHOST-2026-103284 Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedback

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without...

CVE-2026-98201

A flaw was found in the Linux kernel's input subsystem. When handling 32-bit compatibility requests for force feedback input effects, the kernel fails to properly initialize memory buffers before copying data from user space. A local user can exploit this vulnerability to read uninitialized kerne...

CVE-2026-98265

The Linux kernel contains a vulnerability in the ALSA usb-audio driver where the data_ep_set_params() function allocates data URB memory based on u-&gt;packets. However, for implicit feedback sinks, snd_usb_queue_pending_output_urbs() may overwrite this limit with a larger count from the sync sou...