dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM

.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...

SUSE CVE-2026-53386

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-53386

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-53386

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-53386 iio: adc: ti-ads1298: add bounds check to pga_settings index

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

EUVD-2026-45508

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-53386 iio: adc: ti-ads1298: add bounds check to pga_settings index

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-53386

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

CVE-2026-53386

CVE-2026-53386 affects the Linux kernel iio: adc: ti-ads1298 driver. The issue is a bounds check for pga_settings indexing: ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield 0–7; values >= 7 cause an out-of-bounds access. A fix adds a bounds check and returns -EINVAL when t...

CVE-2026-16226

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function savesettings of the file /admin/adminclassnovo.php. This manipulation of the argument img causes unrestricted upload. The attack is possible to be carried out remotely...

CVE-2026-16226

SourceCodester Pizzafy Ecommerce System 1.0 is affected. The vulnerability resides in /admin/admin_class_novo.php via the save_settings function, where manipulating the img argument enables unrestricted upload. This can be exploited remotely, with impact limited to uncontrolled file upload. No re...

CVE-2026-16226 SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function savesettings of the file /admin/adminclassnovo.php. This manipulation of the argument img causes unrestricted upload. The attack is possible to be carried out remotely...

CVE-2026-16226

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function savesettings of the file /admin/adminclassnovo.php. This manipulation of the argument img causes unrestricted upload. The attack is possible to be carried out remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-53386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = ...

MGASA-2026-0260 Updated python-pydantic-settings packages fix a security vulnerability

The updated packages fix a security vulnerability: NestedSecretsSettingsSource follows symlinks outside secretsdir, enabling local file read and bypassing secretsdirmaxsize. CVE-2026-58203...

Updated python-pydantic-settings packages fix a security vulnerability

The updated packages fix a security vulnerability: NestedSecretsSettingsSource follows symlinks outside secretsdir, enabling local file read and bypassing secretsdirmaxsize. CVE-2026-58203...

CVE-2026-9734

The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the storeInfo function. This makes it possible for unauthenticated attackers to modify the plugin's...

CVE-2026-9734

The CVE-2026-9734 entry concerns the W3SC Elementor to Zoho CRM plugin for WordPress. A CSRF vulnerability exists in all versions up to 2.2.0 due to missing or incorrect nonce validation in the storeInfo function, enabling unauthenticated attackers to alter Zoho CRM integration settings by forgin...

CVE-2026-9734 W3SC Elementor to Zoho CRM <= 2.2.0 - Cross-Site Request Forgery to Settings Update

The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the storeInfo function. This makes it possible for unauthenticated attackers to modify the plugin's...