CVE-2026-4861

CVE-2026-4861 affects Wavlink WL-NU516U1 (260227) via the /cgi-bin/nas.cgi, function ftext. The issue arises from manipulating the Content-Length argument, triggering a stack-based buffer overflow. Exploitation is remote and public, with a proof-of-concept in CVSS data. Impact indicators show hig...

CVE-2026-4874 Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery SSRF by manipulating the clientsessionhost parameter during refresh token requests. This occurs when a Keycloak client is configured to use the backchannel.logout.url with the application.session.host...

CVE-2026-4840

CVE-2026-4840 affects Netcore Power 15AX up to 3.0.0.6938, specifically the Diagnostic Tool Interface’s /bin/netis.cgi function setTools. The issue arises from manipulating the IpAddr argument, enabling an OS command injection. Remote exploitation is possible, and the exploit has been released pu...

CVE-2026-34051

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper access control on the Import/Export functionality, allowing unauthorized users to perform import and export actions through direct request manipulati...

CVE-2026-29933

A reflected cross-site scripting XSS vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header...

Tandoor Recipes 安全漏洞

Tandoor Recipes is an open-source application designed for managing recipes, planning meals, creating shopping lists, and more. Versions of Tandoor Recipes 2.5.3 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the default setting ALLOWEDHOSTS = , which could all...

PT-2026-28298

Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC affected versions not specified Description HCL Aftermarket DPC is susceptible to a Cross Domain Script Include issue. An attacker can use external scripts to manipulate the Document Object Model DOM, potentially changing t...

The vulnerability of the regmap_add_irq_chip_fwnode() function in the drivers/base/regmap/regmap-irq.c file of the Linux kernel’s interrupt device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the regmapaddirqchipfwnode function in the drivers/base/regmap/regmap-irq.c file of the Linux kernel’s interrupt device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `cs35l41_get_acpi_mute_state()` function in the sound subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cs35l41getacpimutestate function in the sound/hda/codecs/side-codecs/cs35l41hda.c module of the Linux kernel sound subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the storvsc_host_reset_handler() function in the drivers/scsi/storvsc_drv.c file of the Linux operating system’s SCSI device driver module allows a hacker to cause a service failure.

The vulnerability of the storvschostresethandler function in the drivers/scsi/storvscdrv.c file of the Linux SCSI device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the filemap_get_read_batch() function in the mm/filemap.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the filemapgetreadbatch function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vmbus_acpi_add() function in the drivers/hv/vmbus_drv.c module of the Microsoft HyperV Linux operating system kernel allows a attacker to cause a service failure.

The vulnerability of the vmbusacpiadd function in the drivers/hv/vmbusdrv.c module of the Microsoft HyperV Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dev_pm_opp_get_required_pstate() function in the drivers/opp/core.c module of the Linux kernel operating system allows a attacker to trigger a service failure.

The vulnerability of the devpmoppgetrequiredpstate function in the drivers/opp/core.c module of the Linux operating system’s kernel driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Mattermost 安全漏洞

Mattermost is an open-source collaboration platform developed by the American company Mattermost. There is a security vulnerability in Mattermost, which stems from the failure to clean up post content controlled by users. This vulnerability could allow attackers to manipulate administrator...

PT-2026-28286

Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC affected versions not specified Description The application suffers from missing functional level access control, potentially allowing an attacker to escalate privileges and compromise the application. This could lead to th...

etcd 安全漏洞

Etcd is an open-source system developed in Go language, used as a key-value storage system for distributed systems. There are security vulnerabilities in versions prior to 3.4.42, 3.5.28, and 3.6.9 of etcd. These vulnerabilities stem from the possibility for unauthorized users to bypass...

OpenEMR 安全漏洞

OpenEMR is an open-source medical management system developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.3 contained security...

The vulnerability of the pci_rootport_aer_stats_incr() function in the drivers/pci/pcie/aer.c module of the Linux operating system’s PCI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcirootportaerstatsincr function in the drivers/pci/pcie/aer.c module of the Linux operating system’s PCI device driver lies in the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the drm_sched_start_timeout() function in the drivers/gpu/drm/scheduler/sched_main.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmschedstarttimeout function in the drivers/gpu/drm/scheduler/schedmain.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the amd_pmu_handleirq() function in the arch/x86/events/amd/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the amdpmuhandleirq function in the arch/x86/events/amd/core.c module of the Linux operating system’s x86 kernel support module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...