CVE-2026-4974 Tenda AC7 POST Request SetSysTimeCfg fromSetSysTime memory corruption

A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack...

CVE-2026-4974

CVE-2026-4974 affects Tenda AC7 firmware version 15.03.06.44. The vulnerability is in the function fromSetSysTime of /goform/SetSysTimeCfg in the POST Request Handler, where manipulating the Time argument can cause a stack-based buffer overflow. This enables remote code execution over the network...

CVE-2026-33765

Summary: Pi-hole Admin Interface (web) prior to 6.0 contains a critical OS command injection in savesettings.php. The vulnerability arises from unsanitized user-controlled $_POST['webtheme'] being concatenated into a system command executed via PHP’s exec(), with the command running under sudo pr...

CVE-2018-25183

creationtimestamp| type| source ---|---|--- 2026-03-27 19:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2upmpyc32r...

CVE-2026-28369

creationtimestamp| type| source ---|---|--- 2026-03-27 19:19:15+00:00| published-proof-of-concept| Telegram/XCH0TsqFcgtqQSEM226PLv68rO7cMcwSSZTFwAARVhm43GQ 2026-03-27 19:25:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2tum4l4t2d 2026-03-27 22:02:20+00:00| seen|...

CVE-2026-34245

creationtimestamp| type| source ---|---|--- 2026-03-27 19:13:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2t7nkm2g25 2026-03-29 15:41:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2rm7-j397-3fqg...

CVE-2026-30575

creationtimestamp| type| source ---|---|--- 2026-03-27 19:11:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2t4bwmsz23...

CVE-2026-30574

creationtimestamp| type| source ---|---|--- 2026-03-27 19:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2stc4bhr2i...

CVE-2026-34394

creationtimestamp| type| source ---|---|--- 2026-03-27 18:37:45+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-4wwr-7h7c-chqr 2026-03-31 23:20:06+00:00| published-proof-of-concept| Telegram/nmybyhyW9j--U7tziXdh4Y31RLU4faF2Hhhi6Dlcxk1tj2s 2026-04-01...

EUVD-2026-16723

A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed remotel...

CVE-2026-33938

creationtimestamp| type| source ---|---|--- 2026-03-27 18:20:44+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-3mfm-83xf-c92r 2026-03-27 21:38:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33d7jqdq2s 2026-03-27 22:25:00+00:00| seen|...

CVE-2026-33937

creationtimestamp| type| source ---|---|--- 2026-03-27 18:19:58+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2w6w-674q-4c4q 2026-03-27 21:38:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33cy3ffa2s 2026-03-27 22:36:34+00:00| seen|...

EUVD-2026-16742

Fleet: Password reset tokens remain valid after password change for 24 hours...

Google Sets 2029 Deadline as Quantum Computers Threaten Encryption

Google fast-tracks post-quantum cryptography with a 2029 deadline as researchers warn quantum computers could break current encryption sooner than expected...

CVE-2026-33757

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:30+00:00| seen| Telegram/j4uk2-mJi13Bei6kQkbjOgrQjosCkJncfaGDNG1RowRYM4 2026-03-27 23:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi37x76vpm2r 2026-03-30 19:00:15+00:00| seen|...

CVE-2026-25309

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:05+00:00| seen| Telegram/0TkjLsQfxXDhGLxRci6Ro2HiEhTKYRR1p268AcWiw3KWvWE 2026-04-08 22:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizdslovev2j...

CVE-2026-4960

A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. Executing a manipulation of the argument WANT/WANS can lead to stack-based buffer overflow. The attack can be executed remotel...

CVE-2018-25209

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

CVE-2026-4961 Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow

A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack is possible ...

CVE-2026-4961 Tenda AC6 POST Request QuickIndex formQuickIndex stack-based overflow

A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack is possible ...