CVE-2026-90196

A flaw was found in the Linux kernel's Sound Open Firmware SOF component. This vulnerability occurs due to improper validation of topology mixer volume ranges. An attacker could potentially provide malformed volume range values, leading to an integer overflow during memory allocation. This could...

CVE-2026-90191

A flaw was found in the Linux kernel's mailbox: riscv-sbi-mpxy component. This vulnerability arises from insufficient validation of the SBI System Binary Interface return value, which dictates the number of bytes copied from shared memory into the RPMI RISC-V Platform Management Interface...

CVE-2026-90189

A flaw was found in the Linux kernel's nullblk component. A race condition can occur when the configfs subsystem is registered before default devices are created. This allows a local attacker, by performing a specific sequence of operations, to trigger a Use-After-Free UAF vulnerability. This cou...

CVE-2026-90173

A flaw was found in the Linux kernel's SMB Direct smbdirect component. This vulnerability occurs because the system attempts to access memory that has already been freed when handling network communication. A remote attacker could exploit this timing issue, potentially leading to system instabili...

CVE-2026-90170

A flaw was found in ksmbd, a component of the Linux kernel. This vulnerability occurs because the ipcvalidatemsg function reads length fields from an Inter-Process Communication IPC response buffer before verifying if the buffer is large enough. A local attacker, by providing a specially crafted...

CVE-2026-90171

A flaw was found in the SMB Direct smbdirect component of the Linux kernel. This vulnerability arises from an improper handling of child sockets during the shutdown process, where memory is released prematurely while still in use. A remote attacker could potentially exploit this timing issue to...

CVE-2026-90166

A flaw was found in the ksmbd Server Message Block server component of the Linux kernel. A remote attacker could exploit a null-pointer dereference vulnerability within the ksmbdipctreeconnectrequest function. This issue arises when the system attempts to access a memory location that has not bee...

CVE-2026-90164

A flaw was found in the Linux kernel's ksmbd server component. During the server's initialization process, an error in setting up internal process entries or counters is not handled correctly. This oversight can result in the system attempting to access a null pointer, which may lead to a system...

CVE-2026-90163

A flaw was found in the Linux kernel's ksmbd SMB server component. When the ksmbd module fails to initialize, certain resources, such as the proc tree and per-CPU counters, are not properly deallocated. This resource leak can be exploited by a local user, potentially leading to a Denial of Servic...

CVE-2026-90152

A flaw was found in the smb/server component of the Linux kernel. A session leak in the ksmbdsessionregister function occurs when a session fails to be stored, leading to its reference count not being properly decremented. This can result in resource exhaustion, potentially allowing a remote...

CVE-2026-90151

A flaw was found in the Linux kernel's Network File System version 4 NFSv4 component. This vulnerability occurs when an NFSv4 client allocation fails, leaving a stale pointer to a freed client. A local attacker could potentially exploit this use-after-free condition by triggering a callback looku...

CVE-2026-90148

A flaw was found in the Linux kernel's NFSv4 component. When the nfs4addlease function races with a delegation return, it can pass an incorrect, potentially null, argument to nfs4deletelease. This incorrect argument eventually leads to a null pointer dereference, which could allow a local attacke...

CVE-2026-90143

A flaw was found in the Linux kernel's KCM Kernel Connection Multiplexer component. The kcmparsefuncstrparser function, which runs a BPF Berkeley Packet Filter parser, does not properly hold an RCU Read-Copy-Update read lock. This oversight can lead to BPF map operations triggering a warning,...

CVE-2026-90142

A flaw was found in the virtionet component of the Linux kernel. When an AFXDP Address Family eXpress Data Path socket is attached, the system fails to properly resize the RX receive ring buffer. This oversight can lead to an out-of-bounds write operation, where data is written beyond the allocat...

SecAdvisory

July 2, 2019 FN21 Man-in-the-middle Vulnerability related to vCenter CVE-2019-11242 Problem Description A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented b...

Review.CVE-2023-5612

CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis 📌 CVE Overview CVE-ID: CVE-2023-5612 Severity: High CVSS: 8.1 Base Score Type: Server-Side Request Forgery SSRF Component: GitLab CE/EE Webhooks Affected Versions: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" ...

exploit-js2py

CVE-2024-28397 - js2py Sandbox Escape Description The CVE-2024-28397 vulnerability affects versions of js2py up to v0.74, a Python library that allows JavaScript code to be executed within the Python interpreter. The flaw is in the implementation of the disablepyimport method, which should preven...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...

CVE-2026-109522

The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the Admin CRUD Endpoint component. Specifically, an unknown function in the Admin/deleteclinic.php file is susceptible to exploitation via the manipulation of the cid/did arguments. This flaw allows fo...

CVE-2026-109522 girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...