95 matches found
CVE-2026-85494
A flaw was found in Apache Thrift. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted requests to applications utilizing affected language bindings. Flawed input parameter processing and resource allocation can trigger...
PT-2026-89271
Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.3.0 through 2.44.0 Description When processing message-based management requests from an authenticated client with MANAGE permissions, the broker may trigger Java...
SUSE CVE-2026-53246
In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIEECHO processing When a listening SCTP server processes a COOKIEECHO chunk, the cached peer INIT chunk embedded after the cookie is parsed and its parameters are later walked b...
D-Link DIR-513 Router Buffer Overflow DoS
The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...
goform/mp Component Code Execution
The vulnerability of the mp function in the goform/mp component of the webs microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn is related to an out-of-buffer operation in memory when processing the command parameter. Exploiting this vulnerability allows a remote attacke...
D-Link DI-8003 Router Buffer Overflow DoS
The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters name, qq, and time. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a...
D-Link DI-8003 Router Buffer Overflow DoS
The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflows in the stack when processing parameters such as name, en, userid, shibiename, time, act, log, and rpri. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a...
Totolink A7100RU Router setDdnsCfg Arbitrary Command Execution
The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...
TiEmu path traversal vulnerability
TiEmu is a handheld emulator developed by the Linux Programmer Group. Version 3.03-nogdb+dfsg-3 of TiEmu has a path traversal vulnerability. This vulnerability stems from a buffer overflow in the ROM parameter processing, which could allow local attackers to crash the application or execute...
OpenSky Flight Planning SQL Injection
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures to protect the SQL query structure during the processing of the search parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Tenda AC21 SetIpMacBind File Stack Buffer Overflow Vulnerability
Tenda AC21 is a dual-band Gigabit wireless router launched by Tenda Technology, designed for home high-speed Internet needs, supporting 802.11acwave2 technology, dual-band concurrent rate up to 2033Mbps, of which the 5GHz band rate up to 1733Mbps, to meet the high-bandwidth applications, such as ...
EUVD-2017-17086
Malware in sbrugna...
EUVD-2017-17085
Malware in sbrugna...
EUVD-2022-2675
Malicious code in bioql PyPI...
FortiWeb web applications Network Firewall Data Compromise
The vulnerability of FortiWeb web applications’ network firewalls is related to errors in parameter processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20250814-06
Vulnerability in Iperf3 network throughput measurement tool is related to incorrect processing of test parameters passed to server in json format. test parameters passed to the server in json format. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...
strongSwan firewall disclosure protected information
The vulnerability of the strongSwan microprogramming software firewall solution from Ruijie RG-EG306MG-P lies in the lack of encryption for confidential data during the processing of the parameter “idontcareaboutsecurityanduseaggressivemodepsk”. Exploiting this vulnerability can allow a remote...
D-Link Router Command Injection
The vulnerability of D-Link DI-7300G+ and DI-8200G router microprogramming software lies in the lack of measures taken to neutralize special elements when processing parameters such as flag, cmd, and iface on the mspinfo.htm page. Exploiting this vulnerability allows a remote attacker to execute...
Tenda FH1201 fromSafeUrlFilter Code Execution
The vulnerability of the fromSafeUrlFilter function /goform/fromSafeUrlFilter in the Tenda FH1201 router software is related to the operation that goes beyond the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...
TOTOLINK CA300-PoE Router Command Execution
The vulnerability of the msgprocess function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken at the control level during the processing of the URL parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...