EUVD-2026-20495

Hono: Path traversal in toSSG allows writing files outside the output directory...

RedwoodSDK has a CSRF vulnerability in server function dispatch via GET requests

Summary Server functions exported from "use server" files could be invoked via GET requests, bypassing their intended HTTP method. In cookie-authenticated applications, this allowed cross-site GET navigations to trigger state-changing functions, because browsers send SameSite=Lax cookies on...

Cross-site Request Forgery (CSRF)

Overview rwsdk is a Build fast, server-driven webapps on Cloudflare with SSR, RSC, and realtime Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the server function dispatch process. An attacker can cause unauthorized state-changing operations by tricking a...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the Matches function due to improper use of strings.HasPrefix for path matching without ensuring a directory boundary. An attacker can gain unauthorized access to files in directories with names that share a commo...

ROS-20260408-73-0009

A vulnerability in the kmemleakdocleanup function of the mm/kmemleak.c component of the Linux operating system kernel is related to excessive iteration. Exploitation of the vulnerability allows an attacker to cause a denial of service...

CVE-2025-45058

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingxasp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-45058

The D-Link DI-8300 wireless broadband router, specifically version v16.07.26A1 , is vulnerable to a buffer overflow within the jingx_asp function. The flaw is triggered via the fx parameter , where the software fails to check the size of the input during a copy operation. An attacker can exploit ...

CVE-2025-45059

The D-Link DI-8300 wireless broadband router, specifically version 16.07.26A1 , is vulnerable to a buffer overflow in the tgfile_htm function. The flaw occurs via the fn parameter , where a failure to properly check input sizes allows an attacker to provide crafted input to trigger the overflow. ...

CVE-2025-52222

The CVE-2025-52222 issue affects several D-Link routers (DI-8003, DI-8500, DI-8003G, DI-8200G, DI-8200, DI-8400, DI-8004w, DI-8100, DI-8100G) with affected firmware versions. It is caused by a buffer overflow in the radius_asp function triggered via the rd_en, rd_auth, rd_acct, http_hadmin, http_...

PT-2026-31336

Name of the Vulnerable Software and Affected Versions D-Link DI-8300 version 16.07.26A1 Description A buffer overflow exists in the ip position asp function via the ip parameter. Attackers can leverage this to cause a Denial of Service DoS by providing a crafted input. Recommendations Update to a...

PT-2026-31337

Name of the Vulnerable Software and Affected Versions D-Link DI-8300 version 16.07.26A1 Description A buffer overflow exists in the jingx asp function through the fx parameter. Successful exploitation can lead to a Denial of Service DoS with a crafted input. Recommendations Update to a newer...

PT-2026-31458

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.115 Description A flaw exists in PraisonAI where user input from agent.start is directly passed into template-rendering tools like acp create file without proper escaping. This allows execution of template...

CVE-2025-45058

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingxasp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-52222

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rden, rdauth, rdacct, httphadmin,...

CVE-2025-45059

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfilehtm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of the vcc pointer in the sigdsend function. This vulnerability could le...

PT-2026-31369

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 22.4R3-S8 Juniper Networks Junos OS versions 23.2 before 23.2R2-S6 Juniper Networks Junos OS versions 23.4 before 23.4R2-S6 Juniper Networks Junos OS versions 24.2 before 24.2R2-S3 Juniper Networks...

Hono path traversal vulnerability

Hono is a web framework built with TypeScript in the Hono community. Versions of Hono prior to 4.12.12 contained a path traversal vulnerability. This vulnerability stemmed from issues with the toSSG function, which allowed for path traversal attacks, potentially leading to files being written...

Rapid7 Insight Agent security vulnerabilities

Rapid7 Insight Agent is a lightweight software developed by Rapid7 Corporation in the United States. This software is capable of collecting data from IT assets. Rapid7 Insight Agent has a security vulnerability, which stems from an eval function injection, potentially leading to remote code...

D-Link DI-8300 security vulnerabilities

The D-Link DI-8300 is a wireless broadband router designed for small and medium-sized network environments by D-Link Corporation. The D-Link DI-8300 version 16.07.26A1 contains a security vulnerability. This vulnerability stems from a buffer overflow in the fx parameter of the jingxasp function,...