CVE-2026-93041

A flaw was found in the Linux kernel's dw-edma component. A race condition exists where the dwedmaabortinterrupt function prematurely releases a lock, allowing the issuepending function to access outdated Direct Memory Access DMA channel status information. This can lead to new DMA descriptors...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Directory-protection bypass via Rewrite Valve → PUT-based RCE🚨🚨 Summary CVE-2025-55752 is a security regression in Apache Tomcat introduced while fixing bug 60013. When the Rewrite Valve is used, Tomcat applies path normalization before URL decoding. This...

CVE-2026-93042

A flaw was found in the Linux kernel's dmaengine: dw-edma component. This vulnerability occurs because the dw-edma driver incorrectly calls a callback function after a Direct Memory Access DMA descriptor has been terminated. This can lead to a use-after-free condition, where the system attempts t...

CVE-2026-93037

A flaw was found in the Linux kernel's RDMA/hfi1 component. The settxreqheaderahg function fails to properly handle errors returned by sdmatxinitahg. This oversight allows the system to continue processing requests as if they were successfully initialized, even when an error occurred. This could...

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Disclaimer For Educational and Authorized Security Testing Purposes Only. This Proof-of-Concept PoC was synthesized for authorized Red Team emulation and vulnerability auditing. The authors and contributors assume no liability for the misuse of this...

CVE-2026-92513

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access manaib component. The manatablestoreudqp function can incorrectly manage queue pair QP references during partial table insertions. This can lead to a use-after-free vulnerability, where a freed memory region is accessed,...

CVE-2026-92510

A flaw was found in the Linux kernel. When a Shared Receive Queue SRQ is accessed via the netlink path, the rdmarestrackdel function is called too late during the ibdestroysrquser process. This timing issue can lead to a use-after-free vulnerability, where previously freed memory resources might...

CVE-2026-92509

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. When a counter is accessed via the netlink path, the rdmarestrackdel function is invoked too late during the counterrelease process. This timing issue can lead to a use-after-free vulnerability, where...

CVE-2026-92507

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. A synchronization issue in the ibdeallocpduser function, when a Protection Domain PD is accessed via the netlink path, can lead to a use-after-free vulnerability. This could allow a local attacker to potential...

CVE-2026-92499

A flaw was found in the Linux kernel's ext4 filesystem. A local attacker with the ability to create or manipulate a corrupted directory can trigger a use-after-free vulnerability. This occurs when the ext4readdir function attempts to read directory entries from an invalid offset, leading to an...

CVE-2026-92496

A flaw was found in the ath11k Wi-Fi driver in the Linux kernel. This vulnerability allows a buffer overread to occur in the ath11kwmitlvoprx function. The driver reads the firmware buffer without adequately verifying its size, which could lead to reading data beyond the allocated memory. This...

CVE-2026-92491

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the registration of protocol tables, the scmiprotocoltableregister function may fail to properly unregister previous requests if a subsequent entry fails. This can result in a dangling pointer...

CVE-2026-92489

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability occurs in the xfrmdevdirectoutput function due to incorrect handling of network packet buffer skb ownership. When netfilter drops a packet, the skb can be freed twice, leading to a double-free condition. This memory...

CVE-2026-92477

A flaw was found in the Linux kernel, specifically within the scsi: ufs: debugfs component. The ufssavederrwrite function copies user-provided input into a stack buffer without ensuring sufficient space for a string terminator. If the input completely fills the buffer, it overwrites the terminato...

CVE-2026-49048-JoomCCK-SQLi

CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection CVSS 9.8 CVE: CVE-2026-49048 Status: Public disclosure. Reported to Joomla Security Strike Team JSST — Ticket 282420. Advisory Summary Field| Value ---|--- Advisory ID| JOOMCCK-2026-001 CVE| CVE-2026-49048 Product| JoomCCK comjoomcck —...

CVE-2026-90429

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A synchronization issue exists between the error Interrupt Service Routine ISR and the Virtual Interrupt Function VINTF de-initialization process. A concurrent error could lead to the ISR attempting to access a VINTF that is...

perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting

A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...

CVE-2026-90416

A flaw was found in the Linux kernel's RDMA/mlx5 component. The getparam function, used for debugging congestion parameters, incorrectly formats a 32-bit unsigned integer as a signed integer. This can lead to a stack out-of-bounds read when a large value is processed, potentially causing unexpect...

CVE-2026-90406

A flaw was found in the Linux kernel's media: qcom: iris driver. This vulnerability occurs when the iriscoredeinit function fails to properly handle a runtime Power Management PM resume failure. An attacker could potentially exploit this by triggering a scenario where the pmruntimeresumeandget...

CVE-2026-90405

A flaw was found in the media: stm32: dcmi component of the Linux kernel. Improper error handling in the probe function can lead to a null pointer dereference. This issue occurs because dmareleasechannel is called before the dcmi-dmachan variable is properly assigned, potentially allowing a local...