Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Added a check for transmission to prevent skb leaks. Here’s a summary of how the driver stores a reference to an skb during transmission: 1. txbufffreemapconsumerindex-skb = newskb; 2. freemapconsumerindex =...

CVE-2026-45802

FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion or a script...

CVE-2026-45836

The CVE-2026-45836 vulnerability affects the Linux kernel Bluetooth L2CAP code and stems from a missing NULL guard in l2cap_sock_get_sndtimeo_cb(), which can cause a null pointer dereference. The issue is resolved by adding the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_s...

CVE-2026-45836

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...

PT-2026-43221

Name of the Vulnerable Software and Affected Versions Visual Ping version 0.8.0.0 Description A buffer overflow occurs during the handling of input fields, allowing a local attacker to crash the application. By injecting payloads exceeding 4108 bytes into the Host, Time Out, Packet Size, Pause, o...

Edimax EW-7438RPn 安全漏洞

Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Edimax. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates in the parameter maxConn/timeOut operation of the function formConnectionSetting in the file /goform/formConnectionSetting, and...

CVE-2026-9362

CVE-2026-9362: Edimax EW-7438RPn firmware 1.12 has a command-injection in the Setting Handler’s formConnectionSetting (/goform/formConnectionSetting). Manipulating max_Conn/timeOut parameters can lead to remote execution. Attack vector is network with low complexity; authentication required is LO...

Unauthenticated DoS in avatar cache in Grafana

Grafana is an open-source platform for monitoring and observability. The platform supports users having their own avatars, which can be sourced from the Gravatar service API. This uses a cache, to ensure that we don't overload the service. If these requests time out after 3 seconds, a Goroutine i...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37886)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37886 advisory. - In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo...

CVE-2025-27063 Use After Free in Video

Memory corruption during video playback when video session open fails with time out error...

EUVD-2002-1249

Malware in sbrugna...

EUVD-2025-14293

Malicious code in bioql PyPI...

CVE-2025-39801 usb: dwc3: Remove WARN_ON for device endpoint command timeouts

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARNON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'paniconwarn' is enabled and unnecessary call trace prints...

SAML URL monitor to login.microsoftonline.com is down

Continuous error logs on the Netscaler dashboard as below "8699 77 PPE-0 DBSMonServiceBindinglogin.microsoftonline.com:443tcp-defaultvpndbssvc1339998057: DOWN; Last response: Failure - Time out during TCP connection establishment stage"...

CVE-2025-46741

A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred...

CVE-2025-46741

The provided connected sources identify a vulnerability in Blueframe where a suspended or recently logged-out user can continue to interact with the system until the time-out period expires. Affected product is Blueframe; no exact versions are specified in the materials. The root cause, affected ...

CVE-2025-46741 Improper Privilege Management

A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred...

CVE-2024-8243

The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2025-15674

Name of the Vulnerable Software and Affected Versions: WordPress/Plugin Upgrade Time Out Plugin version 1.0 Description: The issue concerns a lack of CSRF check in some places, as well as missing sanitization and escaping, which could allow attackers to make logged-in admins add Stored XSS payloa...

CVE-2024-8243: Cross-Site Request Forgery (CSRF)

The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...