PT-2026-82087

The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the process otp login function. This makes it possible for unauthenticated...

PT-2026-82185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 work function reads a diagnostics report into the f54-report data buffer. The transfer size is determined by rmi f54 get...

PT-2026-82191

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cs40l50 add function where custom data from an FF PERIODIC or FF CUSTOM effect is copied from user space via EVIOCSFF without sufficient validation of the custom l...

PT-2026-82187

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the papr phy attest create handle function where the params-cmd.length variable is not validated before use, potentially leading to a buffer overflow. Additionally, a...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

PT-2026-82146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system during the exchange of two full-file ranges. The function xmi can exchange reflink flags may incorrectly move the reflink inode flag between files...

PT-2026-82180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the gve driver due to a missing implementation of the adjfine function. This issue can be triggered from usermode through the ptp clock adjtime...

PT-2026-82206

Name of the Vulnerable Software and Affected Versions langfun versions prior to 0.1.2 Description An Eval Injection occurs in the default lf.query Python protocol. This issue allows remote unauthenticated attackers to execute arbitrary Python code within the host application context. The flaw is...

PT-2026-82171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the s390/vfio ccw component when the cp init function fails. While the cp free routine is used to unpin or free memory after successful I/O or when cp prefetch...

PT-2026-82160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The zcrypt msgtype6 send ep11 cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload. This approach assumes a fixed payload structure a...

PT-2026-82205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the block subsystem. The disk release function fails to stop the q-timeout timer when releasing a disk whose probe failed before add disk. This occu...

PT-2026-82154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs rtginode ensure function incorrectly handles errors from xfs rtginode load. Specifically, it treats all errors except -ENOENT as...

PT-2026-82119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read occurs in the tc cls bind class function. This happens because u32 bind class unconditionally casts a passed fh to tc u knode and accesses &n-res. When fh is...

PT-2026-82166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds check exists in the ccwchain calc length function. This routine counts the number of channel command words CCWs chained together in a single channel program and is...

The vulnerability of the `Response._make_location_absolute()` function in the `src/webob/response.py` file of the WebOb library, which is used for analyzing HTTP requests and generating HTTP responses. This vulnerability allows attackers to carry out phishing attacks.

The vulnerability of the Response.makelocationabsolute function in the src/webob/response.py file, a library for analyzing HTTP requests and generating HTTP responses in WebOb, is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker t...

The vulnerability of the evbuffer_add_buffer_reference() function in the Libevent event-driven library allows a attacker to cause a service failure.

The vulnerability of the evbufferaddbufferreference function in the Libevent event-driven library is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the walk_pud_range() function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the walkpudrange function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the aml_sfc_probe() function in the drivers/spi/spi-amlogic-spifc-a4.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the eth_get_drvinfo() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gether_disconnect() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the getherdisconnect function in the drivers/usb/gadget/function/uether.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service...