PT-2026-92352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission bypass exists in the ap pmic poll msg handler function within ap pmic ipc.c caused by a confused deputy. A confused deputy is a security issue where...

PT-2026-92306

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A memory corruption issue exists in the gmc mb msg handler function within gmc mba.c caused by a confused deputy. A confused deputy is a security issue where a...

PT-2026-92081

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description An integer overflow exists in the audin Apple backends when processing FramesPerPacket values from MSG SNDIN OPEN messages. An attacker can provide crafted FramesPerPacket values that cause the size...

PT-2026-92365

In platform msg handler init of default msg handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: Fixed the issue where load values were being altered in sk-skstamp during sockrecvcmsgs. KCSAN identified a data race in sockrecvcmsgs, where the read access to sk-skstamp requires using READONCE. BUG: KCSAN: Data race in...

PT-2026-90869

Name of the Vulnerable Software and Affected Versions quequnlong shiyi-blog versions 1.0.0 through 1.2.1 Description A remote cross site scripting issue exists in the chat sendMsg endpoint. The flaw is located within the SysChatMsgMapper.getChatMsgList function in the file...

CVE-2026-89609

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfsexorcisedaemon drops queued messages from a dying daemon without holding ecryptfsmsgctxlistsmux, but ecryptfsmsgctxalloctofree requires that lock. Take the list...

CVE-2026-89609

CVE-2026-89609 is a race condition in the eCryptfs component of the Linux kernel. The function ecryptfs_exorcise_daemon() drops queued messages from a dying daemon without holding the ecryptfs_msg_ctx_lists_mux lock, which ecryptfs_msg_ctx_alloc_to_free() requires. This allows concurrent access t...

CVE-2026-81004

CVE-2026-81004 affects the Linux kernel's IPMI message handler (ipmi:msghandler). When an error occurs during the startup of an IPMI interface, scheduled work may not be properly canceled before the interface is freed, which can prevent clean resource release and potentially lead to resource exha...

PT-2026-96554

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs exorcise daemon drops queued messages from a dying daemon without holding ecryptfs msg ctx lists mux, but ecryptfs msg ctx alloc to free requires that lock. Tak...

PT-2026-90325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ecryptfs component. The function ecryptfs exorcise daemon drops queued messages from a dying daemon without holding the ecryptfs msg ctx lists mux lock...

EUVD-2026-75220

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

CVE-2026-87926

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

CVE-2026-87926: Improper Neutralization of Input During Web Page Generation

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

CVE-2026-87926

CVE-2026-87926 affects the Rizwan17 inventory-management-system (GitHub project), up to commit bfe78a330d01bb26b9daec5dc9ecd5c77900e03f . The vulnerability is a cross-site scripting (XSS) flaw in the Login Page component, specifically in the file index.php . Manipulation of the msg argument allow...

CVE-2026-87926 Rizwan17 inventory-management-system Login Page index.php cross site scripting

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

CVE-2026-87926 Rizwan17 inventory-management-system Login Page index.php cross site scripting

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

PT-2026-89186

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f Description A flaw in the Login Page component exists within the index.php file. Remote attackers can perform cross-site scripting by manipulating the...

CVE-2026-86278 SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...

CVE-2026-86278 SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...