EUVD-2026-88548

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

CVE-2026-102004

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

CVE-2026-102005

Wind River VxWorks 7 versions 24.03 through 26.03 are susceptible to a memory leak vulnerability. This issue occurs when processing specific service routines under certain non-default configuration states, which prevents the system from releasing allocated memory pools before terminating operatio...

CVE-2026-98010

A flaw was found in the Linux kernel's Deficit Round Robin DRR network packet scheduler. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS by configuring a traffic class with an unconstrained low quantum value. When processed with large...

CVE-2026-98011

A flaw was found in the Linux kernel's Heavy-Hitter Filter HHF network scheduler. A local attacker with network administration privileges, which can be acquired within an unprivileged user namespace, can cause a Denial of Service DoS. By setting an excessively small quantum value alongside a...

CVE-2026-97531

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. This issue may allow a local privileged user or storage fabric event to cause a Denial of Service DoS through a system crash. A race condition occurs when a virtual port is deleted concurrently with a port identification request...

CVE-2026-102004 VxWorks 7

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

EUVD-2026-88467

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

CVE-2026-102004 VxWorks 7

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

CVE-2026-102004

Wind River VxWorks 7 versions prior to 26.09 are vulnerable to a memory corruption flaw within the memory management subsystem . The vulnerability is triggered by providing specific arguments to certain system calls . This issue can lead to high impacts on confidentiality, integrity, and availabi...

CVE-2026-101105

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...

EUVD-2026-88440

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-97686 VxWorks 7 Memory Resource leak

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-98002

A flaw was found in the Linux kernel's AMD IOMMU Input-Output Memory Management Unit driver. This flaw allows a local user to cause a Denial of Service DoS or system instability during nested domain allocation. When domain identifiers or memory resources are exhausted, an allocation error value i...

CVE-2026-45562

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2026-101105 code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...

CVE-2026-101105

The Matrimonial System 1.0 (code-projects) is vulnerable to a remote SQL injection in the Profile Creation Endpoint . The flaw exists in the processprofile_form function within the /create_profile file, specifically caused by the improper handling of the fname argument. An attacker can exploit th...

EUVD-2026-88403

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...

CVE-2026-101105 code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofileform of the file /createprofile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is possible to be carried...

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24,...