1117 matches found
CVE-2026-5990
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...
CVE-2026-5989
A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteStatic of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-35472 WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=EstoqueControle...
EUVD-2026-19498
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos & listarIdNome and...
CVE-2026-35398 WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos & listarIdNome and...
CVE-2026-35396
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The...
EUVD-2026-19496
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The...
Belkin F9K1015 安全漏洞
The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability arises from improper handling of the page parameter in the function formSetSystemSettings within the...
Belkin F9K1015 安全漏洞
The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability stems from improper handling of the page parameter in the formSetPassword function within the goform/formSetPasswor...
Belkin F9K1015 安全漏洞
The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...
Tenda CX12L 安全漏洞
The Tenda CX12L is a home-use wireless router device from the Chinese company Tenda. The version 16.03.53.12 of the Tenda CX12L contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/P2pListFilter, specifically the page parameter, whic...
Belkin F9K1015 安全漏洞
The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...
Belkin F9K1015 安全漏洞
The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...
Belkin F9K1122 安全漏洞
The Belkin F9K1122 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.33 of the Belkin F9K1122 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...
WeGIA 输入验证错误漏洞
WeGIA is a network manager for a welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.9 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation or restrictions on the nextPage parameter, which could lead to...
Belkin F9K1015 安全漏洞
The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability arises from improper handling of the page parameter in the function formSetFirewall within the goform/formSetFirewa...
CVE-2019-25668 News Website Script 2.0.5 SQL Injection via index.php
News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive...
CVE-2026-5210
A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an unknown part. Performing a manipulation of the argument page results in file inclusion. Remote exploitation of the attack is possible. The exploit is now public and may be used...
VulnCheck KEV: CVE-2026-4020
The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permissioncallback that unconditionally returns true, allowing any...
