CVE-2026-76004 UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argument pvid leads to stack-based buffer overflow. It is...

CVE-2026-76004

UTT HiPER 1250GW firmware up to 3.2.7-210907-180535 is vulnerable to a stack-based buffer overflow in the HTTP handler endpoint /goform/aspApBasicConfigUrcp, where the pvid argument is passed to strcpy without bounds checking. CVSS 3.1 rates this 9.9 (CRITICAL), enabling remote unauthenticated at...

EUVD-2026-62222

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been mad...

CVE-2026-76003

UTT HiPER 1200GW firmware up to 2.5.3-170306 has a stack-based buffer overflow in the strcpy call of /goform/formGroupConfig triggered by the timestart argument. A remote attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 9.9). ...

CVE-2026-76003 UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been mad...

EUVD-2026-62220

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

CVE-2026-75984

A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2026-75985 TRENDnet Router ping.cgi command injection

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

EUVD-2026-62217

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-75984

TRENDnet TEW-823DRU firmware v1.1.02b01 has a remote command injection flaw in /cgi-bin/admin.cgi: the Hostname argument is passed unsanitized to the shell, allowing low-privileged authenticated attackers to execute arbitrary OS commands. CVSS 3.1 scores it HIGH (7.4). A proof-of-concept script i...

CVE-2026-75978

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

CVE-2026-75976

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...

EUVD-2026-62214

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

CVE-2026-75978 xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulation of the argument queryerClass leads to permission issues...

CVE-2026-75978

In xianrendzw EasyReport up to 2.0.17.0522_Beta, the function DataSourceController.add in DataSourceController.java allows remote manipulation of the queryerClass argument, causing permission issues exploitable with low privileges; no vendor patch is available yet, and a PoC has been disclosed pu...

Azul Zulu Java Multiple Vulnerabilities (2026-08-18)

The version of Azul Zulu installed on the remote host is 6 prior to 6.81.0.204 / 7 prior to 7.87.0.204 / 8 prior to 8.95.0.204 / 11 prior to 11.89.204 / 17 prior to 17.67.204 / 21 prior to 21.51.204 / 25 prior to 25.35.204 / 26 prior to 26.32.204. It is, therefore, affected by multiple...

RockyLinux 8 : pam (RLSA-2026:56131)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:56131 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block directly...

PT-2026-78260

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been mad...

PT-2026-78428

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Network Installation Management NIM could allow a remote attacker to bypass security restrictions. This issue occurs because intermediate certificate authority private keys...