PT-2026-117442

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move uploaded file of the file home.php. The manipulation of the argument my img leads to unrestricted upload. Remote exploitation of the attack is...

CVE-2026-98571

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf-page after recycling on skb build failure In stmmacrx, when napibuildskb fails the descriptor page is recycled back to the page pool with pagepoolrecycledirect, but buf-page is left pointing at the...

freerdp-proxy RDP DoS

The vulnerability of the DynvcTrackerHandleCreateBack function in the freerdp-proxy RDP client FreeRDP component is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-117245

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqli query of the file employees/delete.php. The manipulation of the argument e payroll no lead...

CVE-2025-52290

A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows an attacker to cause a Denial of Service (DoS) . The vulnerability is triggered by processing a crafted media file , which leads to an unexpected application crash. No speci...

Linux kernel BPF Trace Heap Buffer Overflow DoS

The vulnerability of the copyusersyms function in the kernel/trace/bpftrace.c module of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-117244

A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli query of the file farmers/add.php. Executing a manipulation of the argument f no/f id/f name/f locallity/f ac/f phon...

CVE-2025-55654

A use-after-free vulnerability exists in the gf_filter_pid_get_packet function (located in filter_core/filter_pid.c ) of GPAC MP4Box v2.4 . An attacker can exploit this flaw by providing a crafted file to cause a Denial of Service (DoS) . No specific remediation or exploit links are provided in t...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the maarreswalk function in the arch/mips/mm/init.c component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux drivers/char/tlclk.c Heap Buffer Overflow DoS

The vulnerability of the tlclkcleanup function in the drivers/char/tlclk.c component of the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

CVE-2026-98807

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5handlechangeupperevent and mlx5handlechangeinfodataevent functions check for LAG masters which includes both bonding and team devices but only call...

CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

Linux kernel TSI721 DPC Buffer Overflow

The vulnerability of the tsi721dbdpc function in the drivers/rapidio/devices/tsi721.c component of the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the integrity and accessibility of protected information...

Linux kernel module daemonize() Buffer Overflow

The vulnerability of the daemonize function in the tools/power/x86/intel-speed-select/isst-daemon.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

Linux kernel Module Heap Buffer Overflow DoS

The vulnerability of the aareplaceprofiles function in the security/apparmor/policy.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vmuqueryblocks function in the drivers/mtd/maps/vmu-flash.c component of the Linux kernel is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the devicepasidtableteardown function in the drivers/iommu/intel/pasid.c kernel module of the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-117202

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting. Remote...

PT-2026-117227

A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp common/hanlp common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is possible to initiat...

Linux kernel LZNT decompression Data Compromise

The vulnerability of the decompresslznt function in the fs/ntfs3/lznt.c component of the Linux kernel lies in the fact that the operation occurs outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...