CVE-2026-12740

Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers the resulting token into the session...

The vulnerability of the verifyFacebookLike() function in the software for Linksys wireless signal amplifiers allows a hacker to execute arbitrary commands.

The vulnerability of the verifyFacebookLike function in the microprogramming software for Linksys wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of parameters uid and accessToken. Exploiting this...