284094 matches found
CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...
CVE-2026-104610 Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...
EUVD-2026-91482
YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved...
Malicious Package
Overview @fazzcodestudio/wa-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Updated python-urwid & python-wcwidth packages fixes a security vulnerability
Insecure PRNG and Information Exposure in urwid Web Display Backend...
MGASA-2026-0466 Updated python-urwid & python-wcwidth packages fixes a security vulnerability
Insecure PRNG and Information Exposure in urwid Web Display Backend...
CVE-2026-101915 vulnerabilities
Vulnerabilities for packages: homepage, langfuse, langfuse-fips, cadence-web, zitadel, kibana, librechat, pulumi, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, azurite...
CVE-2026-101916 vulnerabilities
Vulnerabilities for packages: homepage, langfuse, langfuse-fips, cadence-web, zitadel, kibana, librechat, pulumi, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, azurite...
GHSA-F596-WHHP-79R4 vulnerabilities
Vulnerabilities for packages: homepage, langfuse, langfuse-fips, cadence-web, zitadel, kibana, librechat, pulumi, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, azurite...
GHSA-M9GG-HP2V-232J vulnerabilities
Vulnerabilities for packages: homepage, langfuse, langfuse-fips, cadence-web, zitadel, kibana, librechat, pulumi, opentelemetry-auto-instrumentations-node, dotstatsuite-supercore, azurite...
Path traversal vulnerability in FUJIFILM Business Innovation and Sharp MFPs (multifunction printers)
Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Sharp Corporation contain a path traversal vulnerability. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 - CVE-2026-78249 FUJIFILM Business Innovation Corp. report...
EUVD-2026-91067
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting XSS. This issue affects CAPEC-63: before 3.0b63...
EUVD-2009-5122
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before...
PT-2026-104340
Name of the Vulnerable Software and Affected Versions TurkHotspot versions through 2026-10-02 Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting XSS, a condition where an application includes untrusted data in a web page without proper...
PT-2026-104299
Name of the Vulnerable Software and Affected Versions Tenda HG7 affected versions not specified Tenda HG9 affected versions not specified Tenda HG10 300001138 en xpon affected versions not specified Description A stack-based buffer overflow occurs in the Boa Web Server component due to improper...
PT-2026-105490
Summary The openUrl function in @a2ui/web core passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button,...
CVE-2026-104610: Stack-based Buffer Overflow
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...
CVE-2026-5782: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows Reflected XSS. This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not...
CVE-2026-84411: Integer Underflow (Wrap or Wraparound)
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of...