PT-2026-98526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue exists in the Linux kernel where the afs dir search bucket function fails to perform a kunmap operation—which unmaps a virtual address from a kernel mapping—whe...

CVE-2026-97649: Use of Default Credentials

A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an unknown functionality of the file examplelite.sql. Executing a manipulation can lead to use of default credentials. It is possible to launch the attac...

PT-2026-98337

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions prior to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw in an unknown function allows remote attackers to perform a manipulation that results in cross-site request forgery, a type of...

ROS-20260925-73-0004

The vulnerability of the slimproi2cblkwr function in the Linux kernel’s drivers/i2c/busses/i2c-xgene-slimpro.c file is related to the lack of control over the valid range of the value that can be passed to the “data-block0” variable. This value ranges from 0 to 255; without proper validation, thi...

CVE-2026-97647: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...

ROS-20260925-73-0189

The vulnerability of the ffadeviceremove function in the drivers/firmware/armffa/bus.c file of the Linux kernel firmware module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-98338

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw exists in the example lite.sql file that allows a remote attacker to execute a manipulation leading to the use of default...

CVE-2026-79153: Improper Privilege Management

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

Configuration, Not Conscience: A Large-Scale Empirical Study of LLM System Prompts

Leaked system prompts are often treated as windows into the hidden values of commercial language models, yet their composition is rarely studied at scale. We analyze a merged corpus of 407 leaked, reconstructed, or officially published system prompts from 62 vendors across four community...

CVE-2026-97650: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function echo of the file admin/fun/addLog.php. The manipulation of the argument reason/detail leads to cross site scripting. The attack can be...

PT-2026-98342

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A remote cross site scripting issue exists in the echo function within the admin/fun/addLog.php file. This occurs when the reason/detail...

ROS-20260925-73-0149

The vulnerability of the drmclienttargetcloned function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2026-97646: Authorization Bypass Through User-Controlled Key

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

PT-2026-98321

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions prior to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description An authorization bypass exists in the file admin/fun/getStudent.php. A remote attacker can exploit this by manipulating the sid argumen...

openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:21888-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21888-1 advisory. This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow...

CVE-2025-51457

The D-Link DAP-2610 router, running firmware version up to 2.06B08r099 , is susceptible to an authenticated command injection vulnerability. This flaw exists within the web interface at the /index.xgi endpoint, where an attacker with valid credentials can exploit specific parameters to execute ar...

SUSE CVE-2026-93243

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

CVE-2026-85082 Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

SUSE CVE-2026-93814

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

SUSE CVE-2026-93818

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...