Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002916 advisory. The keyctlreadkey function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may b...

CVE-2025-67077

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002492 advisory. The implementation of certain splicewrite file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which...

CVE-2025-70890

A stored cross-site scripting XSS vulnerability exists in Cyber Cafe Management System v1.0. An authenticated attacker can inject arbitrary JavaScript code into the username parameter via the add-users.php endpoint. The injected payload is stored and executed in the victim s browser when the...

EUVD-2026-2684

A stored cross-site scripting XSS vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authenticated...

PT-2026-3048

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

CVE-2025-70892

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint...

Phpgurukul Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that stems from the username parameter of the add-users.php endpoint not adequately validating user input, no details of the vulnerability are available at...

CVE-2025-67077

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...

MilleGPG5 security vulnerabilities

MilleGPG5 is an application developed by MilleGPG company. Version 5.7.2 of MilleGPG5 contains a security vulnerability. This vulnerability stems from allowing authenticated users to modify the service executable files located in the MariaDB bin directory, potentially leading to local privilege...

CVE-2025-70891

A stored cross-site scripting XSS vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authenticated...

PT-2026-3114

Name of the Vulnerable Software and Affected Versions Cyber Cafe Management System version 1.0 Description A stored cross-site scripting XSS issue exists. An authenticated attacker can inject arbitrary JavaScript code into the username parameter through the ''/add-users.php'' endpoint. The inject...

PT-2026-3115

Name of the Vulnerable Software and Affected Versions Phpgurukul Cyber Cafe Management System version 1.0 Description The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the /add-users.php API endpoint, leading to a stored cross-site...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003308 advisory. security/keys/bigkey.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allow...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001883 advisory. arch/mips/include/asm/threadinfo.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure TIFSECCOMP checks on the fast system-call path, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003107 advisory. The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003209 advisory. sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kern...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002681 advisory. The xenbiovecphysmergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001838 advisory. arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002212 advisory. The dovideosetspupalette function in fs/compatioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow...