The vulnerability of the led_get() function in the drivers/leds/led-class.c module, which supports Linux LED devices, allows a attacker to cause a service failure.

The vulnerability of the ledget function in the drivers/leds/led-class.c module related to Linux LED support in the Linux kernel is associated with errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260826-73-0012

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-72615

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF F PREORDER replace effective prog and purge effective progs located the slot in the effective array by walking the program hlist and counting entries linearly. That count does not matc...

The vulnerability of the pci_get_dev_wrapper() function in the drivers/edac/i10nm_base.c file of the EDAC driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the pcigetdevwrapper function in the drivers/edac/i10nmbase.c file of the EDAC driver for the Linux operating system is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-35516 LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protection

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

PT-2026-30864

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

The vulnerability of the octeon2_usb_clocks_start() function in the arch/mips/cavium-octeon/octeon-platform.c module, which is part of the Linux operating system’s MIPS architecture support, allows a hacker to cause a service failure.

The vulnerability of the octeon2usbclocksstart function in the arch/mips/cavium-octeon/octeon-platform.c module, which is part of the Linux operating system’s MIPS architecture support, is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the sifive gpio_probe() function in the drivers/gpio/gpio-sifive.c file of the Linux kernel’s GPIO driver allows a hacker to cause a service failure.

The vulnerability of the sifivegpioprobe function in the drivers/gpio/gpio-sifive.c file of the Linux kernel’s GPIO driver is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `init_bios_attributes()` function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c driver for X86 kernel-based Linux devices allows a attacker to cause a service failure.

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-3741

A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/DfriendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

CVE-2023-49375

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/update...

EUVD-2025-176545

Malicious code in sails-link-update-glaciology npm...

Malicious code in sails-link-update-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565b4c6d9dd5485fafd3fce71a661cbee1ead7dd64f7bb8d20006fbbcbc76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111685

Malicious code in link-update-jwt-chai npm...

MAL-2025-141546 Malicious code in deneb-link-update-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d9c4475b482ba822ab66700268c35909301fd11e9793500dc71c7e483a8395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114563

Malicious code in deneb-link-update-deneb npm...

PT-2025-34813 · Mahara · Mahara

Name of the Vulnerable Software and Affected Versions: Mahara versions 23.04.8 and 24.04.4 Description: An issue allows an attacker to download files without proper authorization by using a malicious export download URL. Recommendations: Update to a newer version that contains a fix for this issu...

UBUNTU-CVE-2025-21887

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup The issue was caused by dputupper being called before ovldentryupdatereval, while upper-dflags was still accessed in ovldentryremote. Move dputupper after its last...

kernel: net: hns3: fix kernel crash problem in concurrent scenario

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may uninit, then cause kernel crash. To fix...

BIT-GITLAB-2020-13333

A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage...