CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...

CVE-2024-6460

CVE--2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage ausage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...

PT-2026-106628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero crash can occur in the tcp rcvbuf grow and tcp rcv space adjust functions. This happens when tcp rmem1 is configured with an extremely small value, causing tp-rcvq...

PT-2026-115780

In the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp rmem be set below 4096 We can hit a division by zero crash in tcp rcvbuf grow and tcp rcv space adjust: divide error: 0000 1 PREEMPT SMP RIP: 0010:tcp rcvbuf grow+0x187/0x450 net/ipv4/tcp input.c:939 ... grow ...

bamp (>=1.0.2, <=1.2.0), derivatecustomer (>=0.5.0, <=0.6.3) +4 more potentially affected by CVE-2026-114094 via dulwich (0.19.16)

dulwich PYPI version 0.19.16 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - bamp =1.0.2, =0.5.0, =0.1.2, =0.2.1, =0.1.1, =1.0.3 Source cves: CVE-2026-114094 Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grow (1.0.0a6) potentially affected by CVE-2026-114094 via dulwich (0.20.2)

dulwich PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grow 1.0.0a6 Source cves: CVE-2026-114094 Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grow (1.0.0a6) potentially affected by CVE-2026-114095 via dulwich (0.20.2)

dulwich PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grow 1.0.0a6 Source cves: CVE-2026-114095 Source advisory: OSV:GHSA-35MR-4567-66VG...

codehub (>=0.0.4.0, <=0.0.4.6), codetmpl (>=0.0.0.5, <=0.0.1.6) +5 more potentially affected by CVE-2026-114095 via dulwich (0.19.15)

dulwich PYPI version 0.19.15 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - codehub =0.0.4.0, =0.0.0.5, =0.0.1.0, =1.0.0a1, =0.29.0, =0.0.0.7, =0.0.0.3, =0.0.0.4 Source cves: CVE-2026-114095 Source advisory:...

PT-2026-97894

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2 Description An issue exists in the memory management initialization where the deferred grow zone function may cause an overflow of the pgdat-first deferred pfn variable. This occurs when CONFIG DEFERRED STRUC...

Malicious code in goodmanmax9250-forget-grow (npm)

Source: amazon-inspector 1414d8718d25bf5ad9c278743476087f2d3560c4437f83991256453a1f7bc41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

SUSE CVE-2026-74269

In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test testxdpnativeadjstheadgrowdata crashes when run on a bnxt machine and also crashes in NIPA. It seems that the bug is an underflow in bnxtrxmultipageskb, which builds the s...

CVE-2026-74269

A flaw was found in the bnxt driver, a component of the Linux kernel responsible for network card operations. This vulnerability involves a memory corruption issue that occurs during specific network data processing XDP head-grow operations. An underflow in the driver's code can lead to incorrect...

AZL-96006 CVE-2026-74269 affecting package kernel for versions less than 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test testxdpnativeadjstheadgrowdata crashes when run on a bnxt machine and also crashes in NIPA. It seems that the bug is an underflow in bnxtrxmultipageskb, which builds the s...

CVE-2026-74269

In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test testxdpnativeadjstheadgrowdata crashes when run on a bnxt machine and also crashes in NIPA. It seems that the bug is an underflow in bnxtrxmultipageskb, which builds the s...

wasm3:fuzzer: Global-buffer-overflow in Compile_Memory_Grow

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5394434188181504 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5bcddaf584a8 Cras...

WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion Detection

The Grow by Tradedoubler WordPress plugin through version 2.0.21 is vulnerable to Local File Inclusion via the component parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files. !/usr/bin/env python3 --...

RLSA-2023:5048 Important: flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files...

RockyLinux 9 : flac (RLSA-2023:5048)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5048 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...

CVE-2026-12120: Exposure of Sensitive Information to an Unauthorized Actor

The FireBox Popups – Increase Sales and Grow Your Email List plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.7 via the 'formid' parameter. This makes it possible for unauthenticated attackers to extract download a full CSV export of a...

CVE-2026-45889

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. This vulnerability occurs due to incorrect accounting for out-of-order OoO data in the mptcprcvbufgrow function. A subtle and very unlikely race condition could lead to a divide-by-zero error, potentially causing a system...