Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the...

SUSE-SU-2026:4156-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-90700

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the prodcode argument of the file /pages/pro_edit1.php. The attack can be launched remotely with low privileges and no user interaction. CVSS 3.1 rates it 6.3 (MEDIUM) with low impact on confiden...

CVE-2026-90700 itsourcecode Sales and Inventory System pro_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

CVE-2026-90700 itsourcecode Sales and Inventory System pro_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

EUVD-2026-77333

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

test-fuzz

test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...

CVE-2026-2991

KiviCare = 4.1.2 - Authentication Bypass CVE-2026-2991 PoC 📜 Description CVE-2026-2991 is an authentication bypass vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress plugin affecting all versions up to and including 4.1.2. The plugin exposes a public REST endpoint at...

CVE-2026-90699 D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

CVE-2026-90699 D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

EUVD-2026-77331

A weakness has been identified in D-Link DWR-M920 1.1.7. This issue affects the function sub41E60C of the file /boafrm/formPinManageSetup. This manipulation of the argument newPin causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public...

CVE-2026-90699

CVE-2026-90699 affects D-Link DWR-M920 (firmware 1.1.7 ). The vulnerability resides in the function sub_41E60C within the file /boafrm/formPinManageSetup , where manipulation of the newPin argument leads to OS command injection . The attack can be initiated remotely with low privileges and no use...

CVE-2026-4885

CVE-2026-4885 Piotnet Addons for Elementor Pro = 7.1.70 - Unauthenticated Arbitrary File Upload → RCE Description : The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the pafeajaxformbuilder function in all...

CVE-2025-64459-Poc

CVE-2025-64459: Django ORM SQL Injection PoC Vulnerability: SQL Injection via QuerySet and Q keyword argument unpacking. CVE ID: CVE-2025-64459 Discovered By: Me Cyberstan Disclosure Date: November 5, 2025 🚨 Executive Summary This repository contains a Dockerized Proof of Concept PoC demonstratin...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Missing Authorization to Authenticated Subscriber+ Arbitrary User Meta Update Description The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution,...

CVE-2026-90698 memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds

A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function tryreadcommandasciiauth of the file prototext.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit...

CVE-2026-90698

A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function tryreadcommandasciiauth of the file prototext.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit...

CVE-2026-90698

memcached versions 1.6.41 through 1.6.43 are affected by an out-of-bounds read in the try_read_command_asciiauth function of the mcmc Tokenizer (file proto_text.c). The flaw is triggered remotely with no authentication required, leading to a denial of service (availability impact only). The explo...

EUVD-2026-77330

A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function tryreadcommandasciiauth of the file prototext.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit...