PT-2026-128388

In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on TF UPDATE TXN supersede When a TF UPDATE TXN transaction supersedes a pending async transaction in a frozen process, the outdated transaction is freed with kfree directly. This skips binder free tx...

PT-2026-116997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binder module where a TF UPDATE TXN transaction superseding a pending async transaction triggers binder release entire buffer with the is failure flag set to false...

PT-2026-128645

In the Linux kernel, the following vulnerability has been resolved: binder: fix is failure flag for superseded transaction cleanup When a TF UPDATE TXN transaction supersedes a pending async transaction, binder release entire buffer is called with is failure=false. Since the superseded transactio...

Linux Distros Unpatched Vulnerability : CVE-2026-98778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix isfailure flag for superseded transaction cleanup When a TFUPDATETXN transaction supersedes a pending async transaction, binderreleaseentirebuffer i...

Exploit for CVE-2026-53995

CVE-2026-53995: MLflow starttracev3 - TraceInfo.from...

CVE-2026-111929

Coder versions 2.30.0 before 2.34.8 are vulnerable to a cross-organization file disclosure flaw in the provisioner daemon's DownloadFile gRPC handler . An authorization bypass allows authenticated provisioner daemons to download cached Terraform module archives belonging to other organizations. B...

CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

CVE-2026-111897 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpoints

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside their categories by supplying arbitrary record IDs. Attackers in medium permission mode can send upload or delete requests with a...

CVE-2026-111897

The software phpMyFAQ versions 4.2.0-alpha before 4.2.0-beta is vulnerable to an authorization bypass in the attachment administration endpoints. The root cause is a failure to properly restrict actions based on user categories, allowing editors with medium permission mode to manage attachments f...

cups: cups: Arbitrary file overwrite via insecure temporary file handling

A flaw was found in CUPS. Insecure temporary file handling allows a local attacker with print administrative privileges to overwrite arbitrary system files. When configuring a printer, the print service creates a temporary file with a predictable name in a shared directory without verifying wheth...

Netcore NR256CN Authorization Issue Vulnerability

Netcore NR256CN versions 1.5.140116 and earlier have an authorization issue vulnerability. This vulnerability stems from an unvalidated file writing vulnerability in the /bin/boa web server, derived from Boa. Attackers can send POST requests to non-existent .cgi paths, thereby writing...

Hrisikesh Pal Blood_Bank_Management_System Cross-site Scripting Vulnerability

Hrisikesh Pal BloodBankManagementSystem 1.0.0 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the Search field within the file/abs.php, which may lead to cross-site scripting attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from the use of an invalid pstate pointer after the nvkmclkustateupdate function does not hit a break in the listforeachentry loop. In user space, it is possible to request an non-existent pstate ID through...

WordPress Advanced File Manager Authorization Issue Vulnerability

WordPress Advanced File Manager versions 5.4.14 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of authorization, allowing exploitation through incorrectly configured access control levels...

Omnigent path traversal vulnerability

In versions prior to Omnigent 0.14.0 and 0.3.0, there was a path traversal vulnerability. This vulnerability stems from path traversal attacks. Certified users can escape the working directory by setting up nested sub-proxies in os.env.cwd. They can also upload bundles that utilize absolute or...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.1.68 up to 6.2, as well as from 6.6.7 up to 6.7, have security vulnerabilities. These vulnerabilities stem from cloned paths in the smb client’s cifsfilecopychunkrange and cifsremapfilerange functions. These cloned paths are not emptied or invalidated before being...

Grigory Chudov’s buffer error vulnerability

Grigory Chudov’s libtta versions 2.3 and earlier have a buffer error vulnerability. This vulnerability arises from the lack of header checks that reject zero audio channels. An attacker can create a specially crafted .tta file that declares zero audio channels, causing the application to access...

CVE-2025-52691-PoC-SmarterMail-authentication-bypass-exploit-WT-2026-0001

CVE-2025-52691 / WT-2026-0001 SmarterMail Exploit 🚨 IMPORTANT NOTICE This tool is for authorized security testing and educational purposes only! Unauthorized use is illegal and unethical Only use on systems with explicit authorization Use at your own risk Users are responsible for compliance with...