A race condition vulnerability in the Linux kernel's AMD GPU driver (drm/amd/display) related to non-atomic read/modify/write operations on IRQ control registers has been resolved. The issue involves the GLOBAL_SYNC_STATUS register, which controls hardware IRQ sources for the output timing generator. Due to non-atomic operations, a race can occur between disabling and acknowledging IRQs, potentially causing timeouts on high refresh rate panels. The fix introduces a driver-wide spinlock to atomize these operations, preventing the race condition.
A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth Callback Handler. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.17.0-beta.1 can resolve this issue. The patch is named 39fbae87b38573616a1a3b152cdb292787bb1109. It is advisable to upgrade the affected component.
An OS command injection vulnerability (CVE-2026-106931) in the statistics feature of SiteGuard Server Edition web application firewall allows attackers to execute commands with root or SYSTEM privileges. The flaw affects multiple versions of SiteGuard Server Edition for Apache httpd, Nginx, and IIS (excluding FreeBSD) from version 2.20 up to but not including 8.00 Update 5, and for FreeBSD versions from 2.20 up to but not including 7.00 Update 6. The vulnerability is actively exploited in the wild. The vendor provides patches and a workaround for end-of-life versions, and recommends preserving diagnostic information before applying fixes.
A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card Builder. Such manipulation of the argument __metadata__.sshs_model_hash leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
A YARA rule has been published to detect orphaned VBA projects inside DWG files. The rule identifies specific signatures related to these orphaned VBA projects. A VirusTotal retrohunt using this rule found only two detections, indicating limited prevalence. No specific vulnerability or exploit details are provided.
JeecgBoot versions prior to 3.9.5 contain an SQL injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into SQL fragments. This bypass enables attackers to perform boolean or time-based blind SQL injection attacks via endpoints such as /sys/dict/getDictItems, potentially extracting sensitive database contents including administrator password hashes.
A cross-site scripting (XSS) vulnerability exists in AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1 in the create_item_html function of modules/ui_extra_networks.py. The vulnerability arises from improper handling of the filename argument, allowing remote attackers to inject malicious scripts. The issue has been publicly disclosed, but no official response or patch has been provided by the project as of the publication date. The CVSS score is 4.3, indicating a low severity impact primarily affecting integrity with no confidentiality or availability impact.
A critical deserialization of untrusted data vulnerability (CVE-2026-110886) exists in QuantumCloud Conversational Forms for ChatBot up to version 1.5.1. This vulnerability allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high severity. No patch or remediation information is currently provided.
ProjectSend versions 2.0.0 up to but not including 2.7.0 contain an incorrect authorization vulnerability. This flaw allows API token holders with restricted permissions (manage_users and edit_users) to change the token owner's credentials via a PATCH request to the user API endpoint. Exploitation enables resetting the owner's password, disabling two-factor authentication, and signing in with full owner permissions. The vulnerability has a high severity with a CVSS score of 7.2.
CVE-2026-110895 is a high severity SQL Injection vulnerability in DevItems Support Genix support-genix-lite affecting versions up to 1.4.54. The flaw involves improper neutralization of special elements in SQL commands, which can lead to unauthorized data exposure. The vulnerability has a CVSS 3.1 score of 8.5, indicating high impact on confidentiality and low impact on availability, with no integrity impact. No official patch or remediation information is currently provided.
ProjectSend versions 2.0.0 up to but not including 2.7.0 contain a path validation vulnerability in the OrphanFileScanner::isOrphan() function. This flaw allows staff members with the import_orphans permission to manipulate file paths using ./ aliases to treat tracked files as orphans. Exploiting this, an attacker can delete or adopt files owned by other users, bypassing the intended delete_others_files permission check.
A vulnerability in AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1 allows remote attackers to cause resource allocation issues via manipulation of the header length field in the read_metadata_from_safetensors function. This results in a low-severity denial of service impact. The vulnerability is publicly known and exploit code is available, but no official fix or patch has been released yet.
A stored cross-site scripting (XSS) vulnerability exists in IdeaBox Creations PowerPack Lite for Beaver Builder, affecting versions up to and including 1.3.1. This vulnerability allows an attacker to inject malicious scripts that could be executed in the context of other users. The vulnerability has a high severity with a CVSS score of 7.1. No specific patch or remediation information is provided in the available data.
ProjectSend versions 2.5.0 up to but not including 2.7.0 contain a vulnerability in the PasswordController::update() function. This flaw allows sessions of social-provisioned accounts to change local passwords without verifying the current password. An attacker with a stolen session cookie can exploit this by sending a PUT request to /settings/password, enabling them to set a persistent local password, enroll a second factor, and maintain account takeover.
libmng versions through 2.0.3 have a heap-based buffer overflow vulnerability in the mng_read_ordr() function. This occurs because ORDR entry buffers are sized incorrectly, using 5-byte on-wire records instead of 8-byte in-memory entries. An attacker can craft a malicious MNG file containing MHDR, DHDR, and a multi-record ORDR chunk to trigger this overflow, potentially causing application crashes.
A reflected Cross-site Scripting (XSS) vulnerability exists in ThemeGrill eStore plugin versions up to and including 1.6.13. This vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in the context of a victim's browser. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with potential impacts on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.