PT-2026-98226

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.3.0 Description The get trip summary function in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring the trips:read scope. This allows a token granted only unrelated capabilities,...

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel component is related to the assignment of the zero pointer TZGETTRIP. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

DEBIAN-CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

UBUNTU-CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

kernel: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

SQL Injection Vulnerability in VOA (Pengwei) System name parameter

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system name parameter exists SQL injection vulnerability, the vulnerability URL is http://demo.kmpsoft.com/MyWorkflow/WFGetTripNo.aspx. Attackers can use the...