PT-2026-98970

A weakness has been identified in GNU Binutils 2.47. This impacts the function elf link add object symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could...

CLSA-2026-1778674192 Fix CVE(s): CVE-2026-3441, CVE-2026-3442

SECURITY UPDATE: heap-based OOB read in xcofflinkaddsymbols bfd/xcofflink.c triggered by a crafted XCOFF object file - debian/patches/binutils-CVE-2026-3441-3442.patch: bounds-check XTYLD xscnlen csect index and sanity-check rsymndx before indexing symhashes - CVE-2026-3441 - CVE-2026-3442...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990797 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatlinkadd In atatlinkadd, the return value of...

CVE-2022-49424

CVE-2022-49424 is a Linux kernel issue in the Mediatek IOMMU driver. The root cause is a NULL pointer dereference when printing dev_name due to larbdev being NULL during probe (mtk_iommu_probe_device). The crash can occur in device_link_add() and is triggered by an incorrect DTS input. The public...

PT-2025-9952

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been identified, which can lead to recursive locking when adding a device that is already a team device lower. This issue is not useful in...

Yzmcms Cross-Site Scripting Vulnerability

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /link/add.html component of YzmCMS version 5.3. An attacker can use this vulnerability to execute arbitrary Web scripts ...

PT-2018-2624

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31.1 Description A NULL pointer dereference was discovered in the elf link add object symbols function in the Binary File Descriptor BFD library, which is part of GNU Binutils. This issue occurs when processing a special...

CVE-2018-16349

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add formremark parameter...

Design/Logic Flaw

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add formremark parameter...

PT-2017-17646

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is related to a heap-based buffer over-read in the Binary File Descriptor BFD library, specifically in the aout link add symbols function. This occurs due to an incomplete check for invalid strin...

PT-2017-17647

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The Binary File Descriptor library has an off-by-one vulnerability in the aout link add symbols function due to insufficient string offset checking. This issue could cause the GNU linker program to crash...

CVE-2011-5070

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

MTCMS multiple upload vulnerabilities

avatar upload vulnerability: upload any kind of file in: site.com/MTCMS-V2.2/?a=gallery&b=adddown and approuved or not it will be here : /uploads/pictures/ same thing for : add link /index.php?a=links&b=addlink xss permanent on Contact Us : message & title fields are vulnerable to an xss attack...