CVE-2025-59424

CVE-2025-59424 LinkAce Stored Cross-Site Scripting XSS on the /system/audit page...

CVE-2026-49400: Deserialization of Untrusted Data

October System provides the system module for October Content Management System. Prior to versions 3.7.17 and 4.2.21, the backend SessionMaker trait stored widget session state as base64serialize... and consumed it with unserialize without an allowedclasses restriction. Any code path that could...

Protection Mechanism Failure

Overview Affected versions of this package are vulnerable to Protection Mechanism Failure via the System\Twig\SecurityPolicy process. An attacker can read and modify arbitrary database records, execute arbitrary SQL commands, and inject PHP code to achieve remote code execution by exploiting meth...

PT-2026-49810

In OSMMapPMRGeneric of pmr os.c, there is a possible way to leverage a system call to system call to maliciously expand the VMA out of bounds due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVE-2026-41970: Out-of-bounds Write

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-8196

A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/LoginController.java of the component mLogin Endpoint. This manipulation causes authorization bypass. The attack...

PT-2026-39415

Name of the Vulnerable Software and Affected Versions JeecgBoot version 3.9.1 Description A flaw in the 'mLogin' endpoint within the LoginController.java file of the jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/ component allows for remote authorization...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux fs/ubifs/file.c Heap Buffer Overflow DoS

The vulnerability of the ubifswriteend function in the fs/ubifs/file.c module of the Linux file system support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-4623

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to...

Ceph MDS Access Unauthorized Information Disclosure

The vulnerability of the cephmdscheckaccess function in the fs/ceph/mdsclient.c module of the distributed file system support module for Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to gain unauthorize...

CVE-2026-2965

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-5676

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-24928

CVE-2026-24928 is an out-of-bounds write vulnerability in the file system module. Affected component details are not specified in the provided documents. CVSS 3.1 base score 5.8 (MEDIUM) with LOCAL attack vector, HIGH attack complexity, NO privileges required, UI interaction required, and confide...

PT-2026-6714

Name of the Vulnerable Software and Affected Versions versions prior to 2026-24928 Description An out-of-bounds write issue exists in the file system module. Successful exploitation could impact service confidentiality. Recommendations At the moment, there is no information about a newer version...