Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32964)

The Tenda BE12 Pro is a Wi-Fi 7 wireless router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeClientFilter function in the /goform/SafeClientFilter file, which fails to properly handle the page parameter...

Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32962)

The Tenda BE12 Pro is a Wi-Fi 7 router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeUrlFilter function in the /goform/SafeUrlFilter file, which fails to properly handle the parameter page. An attacker ca...

Tenda BE12 Pro stack buffer overflow vulnerability

The Tenda BE12 Pro is a Wi-Fi 7 wireless router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromDhcpListClient function in the /goform/DhcpListClient file, which fails to properly handle the page parameter. An...

Linux IPv6 DoS

The vulnerability of the net/ipv6/ip6output.c component in the Linux operating system is related to errors in processing parameter lengths. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK NR1800X Form_Logout() Code Execution

The vulnerability of the FormLogout function in the /formLogout.htm file of the TOTOLINK NR1800X router microprogramming system is related to the operation of writing data outside the buffer in memory when processing the Host parameter. Exploiting this vulnerability allows an attacker to execute...

ROS-20260715-73-0026

The vulnerability of the WebML component in Google Chrome relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

📄 xxl-job Cross Site Scripting

A persistent cross site scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized URL‑encoded JavaScript. xxl-job versions prior to 3.4.0 are affected. Description Summary A stored Cross‑Site Scripting vulnerability exists in...

PT-2026-60177

Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get next path function in Redash's authentication module stripped the scheme and netloc from user-supplied next parameters but did not normalize multiple leading slashes, allowing a crafted login URL such as...

Django Length Mismatch DoS

The vulnerability of the Django web application framework is related to improper handling of length parameter mismatches. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-47158: Cross-Site Request Forgery (CSRF)

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO authorization flow did not bind the OAuth state parameter accepted by /connect/authorize to the initiating browser session, allowed attacker-controlled PKCE parameters, and left SsoAuth records intact...

CVE-2026-15751

CVE-2026-15751 affects the mastergo-design mastergo-magic-mcp component set up to version 0.2.0. The vulnerability targets the execute function in mastergo/component-workflow.md for mcp__getComponentGenerator, where manipulation of the rootPath argument enables path traversal. Exploitation is loc...

CVE-2026-15643

AWS HealthLake MCP Server awslabs.healthlake-mcp-server is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all...

CVE-2026-48784

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, UrlGenerator::doGenerate used strtr dot-segment encoding that skipped every other chained ../ or ./ segment, allowing attacker-controlled route parameters...

CVE-2026-48489

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-supplied failurepath parameter when failureforward: true was enabled, allowing an unauthenticated...

CVE-2026-15714

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When...

CVE-2026-13001 Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'podlovehandlecachefiles' function in all versions up to, and including, 4.5.1. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter

Description Applications built with the Auth0 Symphony SDK, using the Authorizer security authenticator to protect HTTP routes may accept OAuth 2.0 bearer access tokens provided through a URL query parameter, in addition to the standard Authorization header, which may increase the risk of access...

GHSA-FFQ7-HH2J-R24P Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter

Description Applications built with the Auth0 Symphony SDK, using the Authorizer security authenticator to protect HTTP routes may accept OAuth 2.0 bearer access tokens provided through a URL query parameter, in addition to the standard Authorization header, which may increase the risk of access...

CVE-2026-47428 Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served /vitesttest/ with the otelCarrier query parameter inserted directly into an inline module script, allowing a crafted browser-runner URL to execute arbitrary JavaScript in the Vitest...

CVE-2026-47428 Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served /vitesttest/ with the otelCarrier query parameter inserted directly into an inline module script, allowing a crafted browser-runner URL to execute arbitrary JavaScript in the Vitest...