St. Joe ERP system - SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2026-99156

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...

CVE-2026-99156

The Linux kernel contains a use-after-free race condition within the scsi_tape driver. The vulnerability occurs because st_remove() drops the probe reference via kref_put() before removing the index from st_index_idr. This allows a concurrent st_open() call to potentially access and call kref_get...

CVE-2026-99156 scsi: st: Fix use-after-free race between st_remove() and st_open()

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...

EUVD-2026-111908

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...

PT-2026-128149

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between st remove and st open st remove drops the probe reference on the scsi tape with kref put and only afterwards removes its index from st index idr. If that was the last reference, scsi tape...

UBUNTU-CVE-2026-99156

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its index from stindexidr. If that was the last reference, scsitaperelease...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the import, importstr, or importbin process in .jsonnet files, which are not confined to the repository root. An attacker can access arbitrary files readable by the repo-server, such as environment variables,...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the import, importstr, or importbin process in .jsonnet files, which are not confined to the repository root. An attacker can access arbitrary files readable by the repo-server, such as environment variables,...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the import, importstr, or importbin process in .jsonnet files, which are not confined to the repository root. An attacker can access arbitrary files readable by the repo-server, such as environment variables,...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the process that resolves remote file paths from server directory listings without constraining them to the intended directory. An attacker can access, delete, or rename files outside the designated directory by...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the process that resolves remote file paths from server directory listings without constraining them to the intended directory. An attacker can access, delete, or rename files outside the designated polling...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the process that resolves remote file paths from server directory listings without constraining them to the intended polling directory. An attacker can access, delete, or rename files outside the intended directo...

DEBIAN-CVE-2026-98674

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...

CVE-2026-98674

The Linux kernel contains a vulnerability in the iio: adc: adi-axi-adc driver. The issue arises because the probe function fails to initialize the st->lock mutex, even though the AXI ADC register access paths rely on this mutex to serialize transactions. The vulnerability is addressed by initi...

PT-2026-116893

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...

PT-2026-116631

Name of the Vulnerable Software and Affected Versions libspatialite versions prior to 5.1.1 Description The software fails to validate the polygon ring count within the ParseWkbPolygon function. This allows an attacker to trigger uncontrolled interior-ring allocation by providing crafted geometry...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...

PT-2026-115667

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version...