BuildKit 后置链接漏洞

BuildKit is a concurrent, cache-efficient build tool package developed by Moby. Versions of BuildKit prior to 0.28.1 contained a post-link vulnerability. This vulnerability stemmed from insufficient validation of Git URL fragment sub-directory components, which could allow access to files outside...

PT-2026-28686

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A stack-based buffer overflow exists in the fromWizardHandle function of the /goform/WizardHandle file within the POST Request Handler component. Manipulation of the WANT/WANS argument can trigger this...

PT-2026-28700

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description A flaw exists in the Tenda AC15 router that allows remote attackers to trigger a stack-based buffer overflow. The issue is located within the POST Request Handler component, specifically in the...

PT-2026-28741

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0 Description Langflow contains a path traversal flaw where the 'POST /api/v2/files' endpoint fails to sanitize the filename parameter within multipart form data. This allows an attacker to use path traversal...

CVE-2026-33945

creationtimestamp| type| source ---|---|--- 2026-03-26 23:59:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysrbvxdo2i 2026-03-27 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298196062602424 2026-03-27 00:00:44+00:00| seen|...

CVE-2026-2511

creationtimestamp| type| source ---|---|--- 2026-03-26 23:21:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyqluhi7z2h 2026-03-26 23:21:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyqmqtmrj2h...

CVE-2026-33664

creationtimestamp| type| source ---|---|--- 2026-03-26 23:20:03+00:00| seen| Telegram/8zEAgaRSdVOPVh8YiiaVjapuYDuCzradOizJ-8M58UocKc 2026-03-31 05:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3midffuq3aw2v...

CVE-2026-4902

A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...

CVE-2026-33640

creationtimestamp| type| source ---|---|--- 2026-03-26 23:16:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyqdbay5k2g 2026-03-26 23:19:48+00:00| seen| Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0...

CVE-2026-4905

A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-4904 Tenda AC5 POST Request setcfm formSetCfm stack-based overflow

A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...

CVE-2026-4903

CVE-2026-4903 affects the Tenda AC5 (firmware 15.03.06.47). The vulnerability is in the POST /goform/QuickIndex handler function formQuickIndex, where manipulating the PPPOEPassword argument triggers a stack-based buffer overflow. The attack can be mounted remotely, with the exploit published and...

CVE-2026-4903 Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption

A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This manipulation of the argument PPPOEPassword causes stack-based buffer overflow. The attack may be initiated remotely. Th...

CVE-2026-4902 Tenda AC5 POST Request addressNat fromAddressNat memory corruption

A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...

CVE-2025-12805

creationtimestamp| type| source ---|---|--- 2026-03-26 22:21:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhynbhwrsw2j 2026-03-26 22:22:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyncg4j2v2s 2026-03-26 22:48:16+00:00| seen|...

CVE-2026-33542

creationtimestamp| type| source ---|---|--- 2026-03-26 22:08:31+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-p8mm-23gg-jc9r 2026-03-27 00:18:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhytrl4m5d23 2026-03-31 17:00:00+00:00| seen|...

CVE-2026-33895

creationtimestamp| type| source ---|---|--- 2026-03-26 22:04:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q67f-28xg-22rw 2026-03-27 21:39:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33fes6be2c 2026-03-27 23:27:55+00:00| seen|...

CVE-2026-33894

creationtimestamp| type| source ---|---|--- 2026-03-26 22:02:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ppp5-5v6c-4jwp 2026-03-27 21:39:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33fsgfdk2j 2026-03-27 23:27:55+00:00| seen|...

CVE-2026-32501

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:00+00:00| seen| Telegram/ZlwyyZCGobz0DL3VkciBBst8GvSl0UBVZV3ZV9Oa2yUbLdM 2026-04-07 15:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miw3uo5ff72c...

CVE-2026-32485

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-07 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miv2dr5xbv2w...