🚨 CVE-2025-59609
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
🎖@cveNotify
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
🎖@cveNotify
🚨 CVE-2025-59610
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
🎖@cveNotify
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
🎖@cveNotify
🚨 CVE-2025-59611
Memory corruption in diagnostic services due to absence of input validation
🎖@cveNotify
Memory corruption in diagnostic services due to absence of input validation
🎖@cveNotify
🚨 CVE-2025-59612
Memory corruption in windows drivers while sending incorrect trusted application request
🎖@cveNotify
Memory corruption in windows drivers while sending incorrect trusted application request
🎖@cveNotify
🚨 CVE-2025-59613
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
🎖@cveNotify
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
🎖@cveNotify
🚨 CVE-2025-59614
Memory Corruption when sending random number generator command with insufficient output buffer size.
🎖@cveNotify
Memory Corruption when sending random number generator command with insufficient output buffer size.
🎖@cveNotify
🚨 CVE-2026-10296
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
🎖@cveNotify
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
🎖@cveNotify
GitHub
itsourcecode Fees Management System V1.0 SQL Injection Vulnerability · Issue #7 · ltranquility/vuln_submit
itsourcecode Fees Management System V1.0 SQL Injection Vulnerability NAME OF AFFECTED PRODUCT(S) Fees Management System Vendor Homepage https://itsourcecode.com/free-projects/php-project/fees-manag...
🚨 CVE-2026-10297
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
🎖@cveNotify
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
🎖@cveNotify
GitHub
itsourcecode Fees Management System V1.0 SQL Injection Vulnerability · Issue #8 · ltranquility/vuln_submit
itsourcecode Fees Management System V1.0 SQL Injection Vulnerability NAME OF AFFECTED PRODUCT(S) Fees Management System Vendor Homepage https://itsourcecode.com/free-projects/php-project/fees-manag...
🚨 CVE-2026-10298
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
🎖@cveNotify
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
🎖@cveNotify
GitHub
GitHub - ggml-org/whisper.cpp: Port of OpenAI's Whisper model in C/C++
Port of OpenAI's Whisper model in C/C++. Contribute to ggml-org/whisper.cpp development by creating an account on GitHub.
🚨 CVE-2026-10299
A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument delid causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
🎖@cveNotify
A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument delid causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
🎖@cveNotify
🚨 CVE-2026-10300
A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such manipulation of the argument lora_path leads to reachable assertion. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
🎖@cveNotify
A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such manipulation of the argument lora_path leads to reachable assertion. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
🎖@cveNotify
GitHub
[Bug] Scheduler crash in LoRA, loss of availability · Issue #23141 · sgl-project/sglang
Checklist I searched related issues but found no solution. The bug persists in the latest version. Issues without environment info and a minimal reproducible demo are hard to resolve and may receiv...
🚨 CVE-2026-24085
Memory Corruption when processing display command line information due to improper initialization of a variable.
🎖@cveNotify
Memory Corruption when processing display command line information due to improper initialization of a variable.
🎖@cveNotify
🚨 CVE-2026-24088
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
🎖@cveNotify
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
🎖@cveNotify
🚨 CVE-2026-24090
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
🎖@cveNotify
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
🎖@cveNotify
🚨 CVE-2026-24091
Memory corruption while processing fastboot commands with improperly formatted input.
🎖@cveNotify
Memory corruption while processing fastboot commands with improperly formatted input.
🎖@cveNotify
🚨 CVE-2026-54117
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
🎖@cveNotify
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-54118
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
🎖@cveNotify
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-47295
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
🎖@cveNotify
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
🎖@cveNotify