Linux net mac80211 mlme Heap Buffer Overflow DoS

The vulnerability of the function ieee80211mlreconfiguration in the net/mac80211/mlme.c module of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protecte...

Redpine Signals Wireless Driver Heap Buffer Overflow DoS

The vulnerability in the rsimac80211config function within the drivers/net/wireless/rsi/rsi91xmac80211.c file of the Redpine Signals wireless adapter driver for the Linux kernel is related to improper resource initialization. Exploitation of this vulnerability may allow a remote attacker to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100387 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: drop pending enqueued packets on removal Packets sitting in nfqueue might hold ...

EUVD-2026-60357

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-67926

The JeecgBoot v.3.9.2 software is affected by a vulnerability in its AI Chat Module that allows a remote attacker to achieve arbitrary code execution . The flaw is triggered via the files Parameter . The impact is rated as CRITICAL with a CVSS v3.1 score of 9.8 , indicating high severity across c...

CVE-2026-49306: Use After Free

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49302: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-76792

Name of the Vulnerable Software and Affected Versions JeecgBoot version 3.9.2 Description An issue in the JeecgBoot AI Chat Module allows a remote attacker to execute arbitrary code by manipulating the files parameter. Recommendations At the moment, there is no information about a newer version...

PT-2026-76796

Name of the Vulnerable Software and Affected Versions hashcat versions after 7.1.2 Description A heap buffer overflow exists in the KeePass AESKDF/KDBX v4 module module 34301. The issue occurs when the module processes the ninth hash field token; while it accepts up to 600 hex characters, it...

PT-2026-76781

Name of the Vulnerable Software and Affected Versions FreeCAD versions prior to 1.1.2 Description An issue exists in the PropertyPythonObject::Restore function within src/App/PropertyPythonObject.cpp where the software passes an attacker-controlled module attribute from serialized...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

PT-2026-73227

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-63667: Improper Limitation of a Pathname to a Restricted Directory

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099892 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be...

Linux netfilter Heap Buffer Overflow DoS

The vulnerability of the nftaddsetelem function in the net/netfilter/nftablesapi.c kernel module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel kexec DoS

The kexec module vulnerability in the Linux kernel is related to a flaw in its source verification mechanism. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux fat kernel DoS

The fat module vulnerability in the Linux kernel is related to a whole-number loss of integrity. Exploitation of this vulnerability may allow an attacker to cause a denial of service by using a corrupted FAT image...

CVE-2026-49308: Undefined Security Weakness

Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...