67707 matches found
CVE-2026-18585
The CVE describes a heap-based overflow in GL.iNet APPS-NAS NAS module function nas-web.get_file_list, affecting GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 (through 20260707). The vulnerability arises from manipulation of input to nas-web.get...
CVE-2026-20464
A vulnerability exists in the hevc decoder where an integer overflow can lead to an out of bounds write . If an attacker has already obtained System privilege , this flaw could be used to achieve remote escalation of privilege . Exploitation does not require user interaction. Remediation details ...
CVE-2026-18581 ggml-org llama.cpp Jinja Minja Template parser.cpp assertion
A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...
PT-2026-67484
A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/code executor/jinja2/jinja2 transformer.py of the component Jinja2 Handler. The manipulation results in improper neutralization of special elements used...
PT-2026-67144
A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get file list of the component APPS-NAS Module. Performing a manipulation results in heap-based buffer...
PT-2026-67146
A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...
PT-2026-67397
Name of the Vulnerable Software and Affected Versions GL.iNet GL-MT3000 versions prior to 4.4.6 Description Command injection is possible via remote exploitation in the ovpn-client.so Native Plugin. The issue exists within the ovpn-client.check config function located in the /cgi-bin/glc file,...
PT-2026-67387
Name of the Vulnerable Software and Affected Versions Check Point Security Management Server affected versions not specified Check Point Multi-Domain Security Management Server MDS affected versions not specified Description An authentication bypass allows an unauthenticated remote attacker with...
PT-2026-67482
Name of the Vulnerable Software and Affected Versions GL-iNet GL-MT3000 versions prior to 4.4.6 Description Command injection is possible via remote exploitation in the wg-server.so Native Plugin. The issue exists within the server.set peer function located in the /cgi-bin/glc file, where imprope...
SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems Via Deterministic Side Channels
Modern large language models LLMs exhibit activation sparsity, wherein only a subset of their neurons is activated for given input tokens. Researchers have leveraged this property to optimize LLM serving systems by omitting weight accesses and computations pertaining to inactive neurons...
CVE-2026-18616: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.setpeer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The manipulation of the argument publickey leads to command injection. Remote exploitation of the attack is...
CVE-2026-18601: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.checkconfig of the file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Performing a manipulation of the argument filename results in command injection. Remote exploitation of the attack ...
CVE-2026-18647: Server-Side Request Forgery (SSRF)
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request...
CVE-2026-18588: Stack-based Buffer Overflow
A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENTLENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...
PT-2026-67483
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig of the file jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the component PreAuthorize Handler. The manipulation leads to authorization...
PT-2026-67166
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 Note: For MT6880, MT6890, MT6988, MT6990 / AUTO00851293...
.NET DoS
The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
CVE-2024-37014
creationtimestamp| type| source ---|---|--- 2026-08-01 11:00:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49b08f6f-9f5e-4e73-9c20-98471e002f42 2026-08-04 18:00:08+00:00| confirmed|...
