Threat database

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVE-2026-25269 is a medium severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to memory corruption when processing camera requests with excessive batch and IO buffer configurations. This flaw can lead to high impact on confidentiality, integrity, and availability. The vulnerability affects multiple specific Snapdragon versions. No patch information is provided, and no known exploits are reported in the wild.

CVE-2026-25267 is a high-severity vulnerability in Qualcomm Snapdragon products where a missing authorization check allows a non-secure loader to rewrite page tables before secure memory initialization, leading to memory corruption. This flaw affects a wide range of specific Snapdragon hardware versions. The vulnerability has a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability. There is no information about available patches or vendor advisories. No known exploits are reported in the wild.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts, including drafts, pending, scheduled, private and trashed posts, as well as post revisions and media metadata.

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored site data that referenced the old file path.

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id.

The elegro Crypto Payment WordPress plugin through 1.0.1 does not require a shared secret to be configured before trusting incoming payment notification requests, allowing unauthenticated attackers to forge payment confirmations and change the status of arbitrary orders on any installation where that secret has been left at its default empty value.

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated users to have orders marked as paid without any payment being taken.

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by default, allowing unauthenticated attackers to mark an unpaid order as paid, or to cancel or refund an existing order.

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-105775 is a medium severity vulnerability in vllm-project vLLM up to version 0.31.0. It involves an out-of-bounds read in the conv_ssm_forward function within the Completions Request Handler component. The vulnerability can be exploited remotely without user interaction or privileges. Public exploit disclosure exists, but no vendor response or patch is currently available.

Post SMTP plugin for WordPress versions up to 4.0.1 is vulnerable to stored cross-site scripting (XSS) via the 'user_email' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when a user views the affected page. The issue arises from insufficient input sanitization and output escaping, particularly on WordPress Multisite installations with public registration enabled. Attackers can exploit this by submitting email addresses with numeric HTML character references that bypass Post SMTP's validation and get logged verbatim.