117783 matches found
CVE-2026-94028 mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery
A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...
CVE-2026-16542
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...
CVE-2023-42793
CVE-2023-42793について まず別のエクスプロイトを使用してトークンを取得する必要があります。ただし、以下のエクスプロイトはペイロードをURLにエンコードしてサーバーに送信するため、Linuxサーバー上でRCEを取得できます。 使用方法 root@kitploit: python3 ./main -t TEAMCITYTOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENERIP -np LISTENERPORT...
EUVD-2026-83587
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests...
CVE-2026-93741
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...
EUVD-2026-83497
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...
CVE-2026-93741
A buffer overflow in the formWlWds function (file /boafrm/formWlWds) of the Totolink A3002MU (firmware Hh-B20211125.1046) allows a remote, unauthenticated attacker to overflow the buffer by manipulating the submit-url argument. The flaw is rated CVSS 10.0 (Critical) with high impact on confidenti...
CVE-2026-93741 Totolink A3002MU formWlWds buffer overflow
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...
CVE-2026-93741 Totolink A3002MU formWlWds buffer overflow
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...
EUVD-2026-83453
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...
EUVD-2026-83448
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...
CVE-2026-93741: Buffer Copy without Checking Size of Input
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...
CVE-2026-7527: URL Redirection to Untrusted Site
The WP Ghost Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 7.0.02. This is due to the plugin not properly validating user input. This makes it possible for unauthenticated attackers to redirect users to potentially...
CVE-2026-93739
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...
CVE-2026-93740
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...
CVE-2026-93740 Totolink A3002MU formWlEncrypt buffer overflow
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...
CVE-2026-93740 Totolink A3002MU formWlEncrypt buffer overflow
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...
CVE-2026-93740
CVE-2026-93740 affects the Totolink A3002MU wireless router (firmware Hh-B20211125.1046 ). The vulnerability resides in the formWlEncrypt function within the file /boafrm/formWlEncrypt . Manipulating the submit-url argument triggers a buffer overflow , which can be exploited remotely without auth...
CVE-2026-93739
A buffer overflow in the formWlAc function of the file /boafrm/formWlAc on the Totolink A3002MU router (firmware Hh-B20211125.1046 ) can be triggered remotely by manipulating the submit-url argument. The vulnerability is rated CVSS 3.1: 9.9 CRITICAL (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with proo...
CVE-2026-93739 Totolink A3002MU formWlAc buffer overflow
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...