64 matches found
PT-2026-27016
Name of the Vulnerable Software and Affected Versions Tenda A15 version 15.13.07.13 Description A stack-based buffer overflow exists in the UploadCfg function of the /cgi-bin/UploadCfg file. The issue is triggered by manipulating the File argument. This allows for remote exploitation. The exploit...
PT-2026-26918
Name of the Vulnerable Software and Affected Versions D-Link DHP-1320 version 1.00WWB04 Description A flaw exists in the SOAP Handler component, specifically within the redirect count down page function, of the D-Link DHP-1320. This issue allows for a stack-based buffer overflow, which can be...
PT-2026-25746
A new vulnerability with increased severity was disclosed for Tenda AC8 CVE-2026-4254 https://t.co/qH9Y5hHYW2...
PT-2026-25533
A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmc sync.php of the component HTTP Request Handler. Executing a manipulation of the argument template path can lead to os command injection. Th...
PT-2026-23980
Name of the Vulnerable Software and Affected Versions UTT HiPER 810G versions up to 1.7.7-1711 Description A flaw exists in UTT HiPER 810G that could allow for a buffer overflow. This is due to the strcpy function within the /goform/formApMail file. The issue is remotely exploitable, and a public...
PT-2026-23119
Name of the Vulnerable Software and Affected Versions Next.js versions 10.0.0 through 16.1.6 Description Next.js, a React framework for building full-stack web applications, had an issue where the default image optimization disk cache / next/image lacked a configurable upper bound, leading to...
PT-2026-22505
Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A buffer overflow issue exists in the fromGstDhcpSetSer function within the httpd component of Tenda F453 routers. The issue is triggered by manipulating the dips argument. This allows for remote attacks....
PT-2026-21454
Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A flaw exists in the D-Link DWR-M960 that allows for a stack-based buffer overflow. This issue is located within the sub 460F30 function of the /boafrm/formDateReboot file, part of the Scheduled Rebo...
PT-2026-21295
Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A security flaw exists in D-Link DWR-M960. The issue is a stack-based buffer overflow in the function sub 469104 of the file /boafrm/formIpv6Setup. The vulnerability is triggered by manipulating the...
PT-2026-8305
Name of the Vulnerable Software and Affected Versions Intelbras VIP 3260 Z IA version 2.840.00IB005.0.T Description A security flaw exists in Intelbras VIP 3260 Z IA, impacting an unknown functionality within the /OutsideCmd file. This flaw allows for weak password recovery and remote attack...
PT-2026-3417
Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A security flaw exists in Totolink LR350. The issue affects the setWizardCfg function within the /cgi-bin/cstecgi.cgi file, specifically in the POST Request Handler component. Manipulati...
PT-2026-3391
Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627 Description A buffer overflow issue exists in the strcpy function within the /goform/ConfigExceptAli file of UTT 进取 520W version 1.7.7-180627. This allows for remote exploitation of the system. The vendor was...
Towards Understanding and Characterizing Vulnerabilities in Intelligent Connected Vehicles through Real-World Exploits
Intelligent Connected Vehicles ICVs are a core component of modern transportation systems, and their security is crucial as it directly relates to user safety. Despite prior research, most existing studies focus only on specific sub-components of ICVs due to their inherent complexity. As a result...
CVE-2025-4378
creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19376 2025-06-24 20:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsex2vgzmz2k...
CVE-2024-51636
creationtimestamp| type| source ---|---|--- 2024-11-19 19:07:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113511186609832791...
CVE-2024-50552
creationtimestamp| type| source ---|---|--- 2024-11-19 18:37:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113511068489681032...
CVE-2024-9426
creationtimestamp| type| source ---|---|--- 2024-11-13 04:07:09+00:00| seen| https://t.me/cvedetector/10764 2024-11-13 04:07:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113473672698119261...
CVE-2024-40851
creationtimestamp| type| source ---|---|--- 2024-10-28 21:09:09+00:00| seen| None...
CVE-2023-39331
A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations...
