Vuldb Updates

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.2.2. This vulnerability affects the function strreplace of the component wifi. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2023-53582. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 5.15.123/6.1.42/6.4.7. The affected element is an unknown function of the component gpio. Such manipulation leads to memory leak. This vulnerability is referenced as CVE-2023-53579. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. This vulnerability is identified as CVE-2026-2199. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability categorized as critical has been discovered in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. This vulnerability was named CVE-2026-2196. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. The identification of this vulnerability is CVE-2026-2197. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection. This vulnerability is referenced as CVE-2026-2198. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability classified as problematic has been found in Tenda AC7 up to 03.03.03.01_cn. This affects an unknown function of the component Web Management Interface. This manipulation causes insertion of sensitive information into sent data. This vulnerability is tracked as CVE-2026-24427. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability marked as problematic has been reported in Tenda AC7 up to 03.03.03.01_cn. Affected by this issue is some unknown functionality of the component Web Management Interface. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2026-24426. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in Tenda AC7 up to 03.03.03.01_cn. This affects an unknown part. Executing a manipulation can lead to cleartext transmission of sensitive information. The identification of this vulnerability is CVE-2026-24441. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Tenda AC7 up to 03.03.03.01_cn. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-2026-24434. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as critical was found in TOTOLINK A950RG 4.1.2cu.5204_B20210112. The impacted element is the function seturlFilterRules of the file /lib/cste_modules/Firewall.so. Such manipulation of the argument url leads to buffer overflow. This vulnerability is referenced as CVE-2025-67186. It is possible to launch the attack remotely. No exploit is available.

A vulnerability labeled as critical has been found in TOTOLINK A950RG 4.1.2cu.5204_B20210112. The affected element is an unknown function in the library /lib/cste_modules/ipv6.so. The manipulation of the argument radvdinterfacename results in stack-based buffer overflow. This vulnerability is known as CVE-2025-67188. It is possible to launch the attack remotely. No exploit is available.

A vulnerability described as critical has been identified in TOTOLINK A950RG 4.1.2cu.5204_B20210112. This affects the function setIpQosRules in the library /lib/cste_modules/Firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-67187. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Creativeitem Academy LMS 7.0. It has been rated as problematic. This impacts an unknown function of the file /academy/blogs. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2025-71179. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability labeled as critical has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/edit_expenses.php. Such manipulation of the argument expenses_id leads to sql injection. This vulnerability is referenced as CVE-2026-2116. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability marked as critical has been reported in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. This vulnerability is identified as CVE-2026-2117. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability has been found in SourceCodester Online Class Record System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. This vulnerability is known as CVE-2026-2089. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in SourceCodester Online Class Record System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. This vulnerability is handled as CVE-2026-2090. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2 and classified as critical. The affected element is the function ocfs2_find_victim_chain. Such manipulation of the argument cl_next_free_rec leads to allocation of resources. This vulnerability is referenced as CVE-2025-68771. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2. This affects the function f2fs_recover_fsync_data. Executing a manipulation can lead to unchecked return value. This vulnerability is handled as CVE-2025-68769. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is advised.