PT-2026-3037

MilleGPG5 5.7.2 contains a local privilege escalation vulnerability that allows authenticated users to modify service executable files in the MariaDB bin directory. Attackers can replace the mysqld.exe with a malicious executable, which will execute with system privileges when the computer restar...

CVE-2025-70892

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint...

CVE-2025-70892

Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. The application fails to properly validate user-supplied input in the username parameter of the add-users.php endpoint...

CVE-2025-70890

The CVE-2025-70890 entry describes a stored XSS in Cyber Cafe Management System v1.0, via the username parameter of add-users.php. An authenticated attacker can inject JavaScript that is stored and executed when the affected page is viewed. The CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

CVE-2025-67077

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...

CVE-2025-70891

A stored cross-site scripting XSS vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authenticated...

CVE-2025-70891

A stored cross-site scripting XSS vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authenticated...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003258 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service integer overflow and memory corruption or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002823 advisory. The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003461 advisory. fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs- flushing-before-commit list, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003398 advisory. The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading ref...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002796 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003043 advisory. fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs- flushing-before-commit list, which allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002971 advisory. Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003358 advisory. The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002049 advisory. The ttysettermiosldisc function in drivers/tty/ttyldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003032 advisory. The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of addkey for a key that already exists but is uninstantiated, which allows local users to cause...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002949 advisory. drivers/net/usb/asixdevices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possib...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001961 advisory. arch/x86/kernel/cpu/perfeventintel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002187 advisory. The socksetsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which...