CVE-2026-98067: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, it is needed for users to read small data within a compressed extent...

PT-2026-98730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the EROFS implementation regarding LZ4 rolling decompression, which was designed to reduce the memory footprint of temporary pages. The upstream LZ4 implementation may...

CVE-2026-98118

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfront There are some synchronisation issues that derive from the app thread adding more folios to the rolling buffer whilst the collector thread is looking at th...

Linux Distros Unpatched Vulnerability : CVE-2026-98118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix readahead synchronisation issues by loading all folios upfront There are some synchronisation issues that derive from the app thread adding more foli...

Linux Distros Unpatched Vulnerability : CVE-2026-98067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: disable LZ4 rolling decompression for now LZ4 rolling decompression 1 was introduced to reduce the memory footprint of temporary pages: For many cases, i...

CVE-2026-92401 ChangeWeDer crm improper authentication

A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects the function top.upstudy.crm.utils.LoginUserUtil.releaseUserIdFromCookie. The manipulation leads to improper authentication. The attack can be initiated remotely. Continiou...

EUVD-2026-77681

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument docmail/docpswd can lead to sql injection. The attack can be executed remotely...

PT-2026-91286

Name of the Vulnerable Software and Affected Versions subhajitkhan online-clinic-management-system versions up to e9ee77a8827a1446220fa07ee693dc4d9a29a578 Description A remote SQL injection flaw exists in the doctorlogin.php file. This issue occurs when the doc mail and doc pswd arguments are...

CVE-2026-90599

A cross-site request forgery flaw exists in Rizwan17 inventory-management-system (GitHub project) in an unknown function of the file includes/process.php . The vulnerability is remotely exploitable with low complexity, requiring user interaction and no prior authentication, yielding a CVSS 3.1 ba...

CVE-2026-90524

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

CVE-2026-90524

jaychouchannel Tourism-Management-System contains a missing authentication flaw in the Update Endpoint component, allowing a remote unauthenticated attacker to manipulate an unknown function. The flaw was tracked in GitHub issue #11 and patched in commit 84d8ec3 . A proof-of-concept exploit has b...

EUVD-2026-77011

A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...

CVE-2026-90520

jaychouchannel Tourism-Management-System is affected by an improper authorization flaw in the AuthorizationInterceptor.java file of the Authorization Interceptor component. The vulnerability allows a remote attacker with low privileges and no user interaction to exploit it, resulting in low impac...

EUVD-2026-76917

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

PT-2026-90861

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

CVE-2026-90486

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

CVE-2026-90486 openstatusHQ openstatus resolve-custom-domain-rewrite.ts server-side request forgery

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

CVE-2026-87921

Rizwan17 inventory-management-system (a GitHub-hosted project) contains a SQL injection vulnerability in the update_record function within includes/manage.php. Remote attackers can exploit this by manipulating the update_category, cid, update_brand, or update_product arguments without requiring a...

CVE-2026-86307

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

EUVD-2026-72399

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...