CVE-2026-110365

The WPExperts Advanced File Manager (file-manager-advanced) WordPress plugin is vulnerable to a Missing Authorization (CWE-862) flaw in versions up to and including 5.4.14 . This vulnerability allows an attacker to exploit Incorrectly Configured Access Control Security Levels , leading to broken ...

EUVD-2026-103420

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

CVE-2026-110365 WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

Exploit for CVE-2026-103849

CVE-2026-103849 / BlockStrap validation lab !Static validat...

Exploit for CVE-2025-6440

Cyp1337 — CVE-2025-6440 WCDP Mass Exploit ---...

CLSA-2025-1738592614 kernel: Fix of 27 CVEs

xsk: fix OOB map writes when deleting elements CVE-2024-56614 - hvsock: Initializing vsk-trans to NULL to prevent a dangling pointer CVE-2024-53103 - scsi: sg: Fix slab-use-after-free read in sgrelease CVE-2024-56631 - net: inet: do not leave a dangling sk pointer in inetcreate CVE-2024-56601 -...

CLSA-2025-1742472545 kernel: Fix of 10 CVEs

USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - HID: core: zero-initialize the report buffer CVE-2024-50302 - dm cache: fix potential out-of-bounds access on the first resume CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing...

CLSA-2025-1763722365 kernel: Fix of 63 CVEs

wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 CVE-2023-53226 - wifi: mac80211: check S1G action frame size CVE-2023-53257 CVE-2023-53257 - wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-39864 CVE-2025-39864 - partitions: mac: fix handling of bogus partition...

PT-2026-116905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function only removes the pagecache for the specific range being zeroed. When a file is extended, the folio straddling the old...

PT-2026-116904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs remap file range function fails to properly discard the pagecache when extending a file via a clone range. Specifically, the pagecache wa...

CVE-2026-98682: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

CVE-2026-110365: Missing Authorization

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14...

CVE-2026-112016: Missing Authentication for Critical Function

Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into...

PT-2026-116901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the destination page cache is not properly serialized against server-side copy and clone operations. Specifically, the cifs file copychunk range...

Vite 6.2.3 Arbitrary File Read

Vite versions before 4.5.11, 5.4.16, 6.0.13, 6.1.3, and 6.2.4 contain server.fs.deny bypasses that may expose arbitrary files through the development server. This proof of concept identifies exposed Vite servers and validates filesystem reads. https://packetstorm.news/download/236143...

MLflow 3.17.1 and Prior StartTrace Path Traversal

MLflow version 3.17.1 and prior versions using the FileStore tracking backend contain a path traversal vulnerability in the StartTraceV3 API. The proof of concept submits a traversal trace ID and demonstrates trace files written outside the intended trace directory...

WordPress WooCommerce Designer Pro 1.9.26 Arbitrary File Upload

WordPress WooCommerce Designer Pro versions 1.9.26 and prior contain an unauthenticated arbitrary file upload vulnerability in the wcdpsavecanvasdesignajax handler that may allow remote code execution. https://packetstorm.news/download/236146...

CVE-2026-98777: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on TFUPDATETXN supersede When a TFUPDATETXN transaction supersedes a pending async transaction in a frozen process, the outdated transaction is freed with kfree directly. This skips binderfreetxnfixup...

PT-2026-116996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binder module where a TF UPDATE TXN transaction that supersedes a pending async transaction in a frozen process is freed using kfree directly. This action bypasses...

CVE-2026-98553: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofskillsb When autofsfillsuper fails before clearing AUTOFSSBICATATONIC for example, when findgetpid fails on an invalid pgrp mount option, or when an fscontext is closed before...