UBUNTU-CVE-2026-62987

Fabio is an HTTPS and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/httpheaders.go uses protectHeaders for a hardcoded set of forwarded headers but omits the operator-configured ClientIPHeader, TLSHeader, and RequestID names. In...

CVE-2026-45447

🚨 CVE-2026-45447 - Vulnerabilidad Crítica de Use-After-Free en OpenSSL Use-After-Free en el montón enPKCS7verify que permite corrupción de memoria, bloqueos y posible ejecución remota de código. 📖 Resumen Ejecutivo CVE-2026-45447 es una vulnerabilidad crítica en la funcionalidad de verificación...

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232...

Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231

Digisol-DG-GR1321-s-Control-de-Acceso-Inadecuado-CVE-2024-4231...

OESA-2026-3910 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

CVE-2026-94003

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2026-94003

A stack-based buffer overflow in the function get_css_path_from_uri within /cgi-bin/mbox-config of the Comfast CF-N1-S Web Management Interface (version 2.6.0.1) allows an unauthenticated remote attacker to trigger the overflow, leading to high impact on confidentiality, integrity, and availabili...

CVE-2026-94003 Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

EUVD-2026-83730

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

wuhaozhe-s-CVE

wuhaozhe-s-CVE CVE-2023-41623...

CVE-2026-94003: Stack-based Buffer Overflow

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CP-XR-DE21-S--4G-Router-Vulnerabilities

CP-XR-DE21-S--4G-Router-Vulnerabilities Este informe corresponde al CVE-2025-44039 reservado para la vulnerabilidad UART del router asignada al descubridor Yashodhan Vivek Mandke. Por favor, descarga el informe PDF en este repositorio...

Openbsd-Privilege-Escalation

Openbsd-Escalada-De-Privilegios Un script que automatiza el proceso de escalar privilegios en el sistema OpenBSD CVE-2019-19520 explotando el binario xlock y obteniendo su sgid y escalando al usuario root mediante CVE-2019-19522 explotando los privilegios del grupo auth y agregando claves a Skey ...

CVE-2026-6295

The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parsekeycomparefield method that, when the user-supplied value matches the regex ^\sSELECT\s+, wra...

CVE-2026-6295 WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter

The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parsekeycomparefield method that, when the user-supplied value matches the regex ^\sSELECT\s+, wra...

CVE-2026-6295 WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter

The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and including 2.5.0. This is due to an unsafe subquery-detection branch in the Query::parsekeycomparefield method that, when the user-supplied value matches the regex ^\sSELECT\s+, wra...

CVE-2026-92249

The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVE-2026-92249

Qi Addons For Elementor (WordPress plugin) versions up to and including 1.11 are vulnerable to Reflected DOM-Based Cross-Site Scripting via the s search parameter, caused by insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts that execute ...

CVE-2026-92249 Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter

The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVE-2026-92249 Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter

The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...