CVE-2026-80679

A flaw was found in the Linux kernel. Specifically, within the s390/dasd component, the dasdreleasespace function incorrectly checks a function pointer by using a logical AND operator instead of a logical OR operator. This error can lead to a NULL pointer dereference, which may cause a system cra...

CVE-2021-3797

hestiacp is vulnerable to Use of Wrong Operator in String Comparison...

CVE-2021-3797

hestiacp is vulnerable to Use of Wrong Operator in String Comparison...

Design/Logic Flaw

hestiacp is vulnerable to Use of Wrong Operator in String Comparison...

CVE-2021-3797

The CVE-2021-3797 entry for hestiacp has concrete technical details in connected data: in huntr’s description of hestiacp/hestiacp, a CSRF token check uses the != operator to compare $_SESSION["token"] with $_GET["token"] in index.php. This type juggling can bypass the CSRF token, enabling CSRF a...