CVE-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

CVE-2026-87976

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

ShieldCrash

ShieldCrash Vulnerabilidad 0day de Windows Defender Microsoft no ha logrado parchear correctamente ShieldBreak CVE-2026-69414; bajo condiciones específicas, todavía es posible desencadenar exactamente el mismo problema que causó ShieldBreak. Aunque Microsoft corrigió varias cosas para evitar...

CVE-2026-92406

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92405

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92406 SourceCodester Inventory and Monitoring System btn_functions.php add sql injection

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92406

CVE-2026-92406 affects SourceCodester Inventory and Monitoring System 1.0 . The vulnerability is a SQL injection in the file /admins/assessments/databank/btn_functions.php?action=add, triggered by manipulating the difficulty_id argument. Remote exploitation is possible without authentication. The...

EUVD-2026-80893

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92406 SourceCodester Inventory and Monitoring System btn_functions.php add sql injection

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92405

SourceCodester Inventory and Monitoring System 1.0 is vulnerable to SQL injection via the Username argument in the file /index.php . The vulnerability is remotely exploitable without authentication or user interaction, with a CVSS 3.1 base score of 7.3 (High) reflecting low impact on confidential...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

EUVD-2026-80891

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92405 SourceCodester Inventory and Monitoring System index.php sql injection

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92385

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

EUVD-2026-80859

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-92601

Guns through version 8.3.5 , a Java-based enterprise admin framework, contains an improper access control flaw in SysNoticeController . The underlying cause is that the requiredPermission flag defaults to false and is never overridden by any action method, effectively bypassing permission checks....

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the amdgpudmcrtcresetstate function, which releases the old state before allocating a new one. If the kzalloc function fails and returns, the state pointer is not updated, leaving a dangling pointer pointing to freed...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the destruction of the extent buffer in memory when clearing tree blocks that have been released but are still dirty on a zoned file system. This buffer may still be referenced, causing subsequent operations to read the...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that after the drmschedinit function fails to initialize the scheduler, it still calls drmschedfini, resulting in the release of scheduler resources that are not fully initialized. This can potentially lead to...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability. This vulnerability arises because the amdgpudmplanedrmplanereset function first releases an old state and then allocates a new one. When kzalloc fails, the state pointer is not updated, resulting in a null pointer that points to freed memory. Th...