CVE-2026-3728: Stack-based Buffer Overflow

A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly...

PT-2026-23940

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0 Description A SQL injection issue exists in Simple Flight Ticket Booking System version 1.0. The issue is located in the SearchResultOneway.php file and involves manipulation of the from argument...

CVE-2026-3681

A weakness has been identified in welovemedia FFmate up to 2.0.15. This affects the function fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The exploit has been made available to...

CVE-2026-3681

A weakness has been identified in welovemedia FFmate up to 2.0.15. This affects the function fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The exploit has been made available to...

CVE-2026-3678 Tenda FH451 AdvSetWan sub_3C434 stack-based overflow

A vulnerability was determined in Tenda FH451 1.0.0.9. Affected is the function sub3C434 of the file /goform/AdvSetWan. This manipulation of the argument wanmode/PPPOEPassword causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclos...

CVE-2026-3677 Tenda FH451 setcfm fromSetCfm stack-based overflow

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...

CVE-2026-3668

A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The attack is considered to have high...

CVE-2026-3668 Freedom Factory dGEN1 org.ethosmobile.webpwaemul AndroidEthereum access control

A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The attack is considered to have high...

CVE-2026-3668

CVE-2026-3668 concerns Freedom Factory dGEN1 (up to 20260221) in the function AndroidEthereum of the component org.ethosmobile.webpwaemul. The weakness enables improper access controls with remote exploitation possible. The advisory states high attack complexity and that exploitation is difficult...

CVE-2026-3668 Freedom Factory dGEN1 org.ethosmobile.webpwaemul AndroidEthereum access control

A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The attack is considered to have high...

CVE-2026-3668: Improper Access Control

A weakness has been identified in Freedom Factory dGEN1 up to 20260221. This affects the function AndroidEthereum of the component org.ethosmobile.webpwaemul. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The attack is considered to have high...

CVE-2026-3610 HSC Cybersecurity Mailinspector URL mliUserValidation.php cross site scripting

A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown functionality of the file /mailinspector/mliUserValidation.php of the component URL Handler. The manipulation of the argument errordescription results in cross site scripting. The...

CVE-2026-3610

A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown functionality of the file /mailinspector/mliUserValidation.php of the component URL Handler. The manipulation of the argument errordescription results in cross site scripting. The...

ROS-20260306-73-0028

A vulnerability in the jbd2journaldirtymetadata function of the Linux kernel is related to a pointer dereferencing error. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of the Fleet Patching and Provisioning component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Fleet Patching and Provisioning component of the Oracle Database Server management system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System (NVOS) operating systems allows attackers to increase their privileges.

The vulnerability of the NVUE interface in NVIDIA Cumulus Linux and Operating System NVOS systems is related to privilege assignment errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the SSH library wolfSSH, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of the SSH library wolfSSH is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Dynamic Vectorization and Streaming Transfer (DVS) implementation of the Cisco Secure Web Appliance allows a hacker to circumvent existing security restrictions.

The vulnerability of the Dynamic Vectorization and Streaming Transfer DVS mechanism implemented in Cisco Secure Web Appliance lies in the loading of code without checking its integrity. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

The vulnerabilities of the functions iforce_serio_xmit() and iforce_serio_irq() in the driver/drivers/input/joystick/iforce/iforce-serio.c of the Linux operating system’s input device drivers allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions iforceserioxmit and iforceserioirq in the driver module drivers/input/joystick/iforce/iforce-serio.c of the Linux operating system’s input device drivers are related to an infinite waiting loop for resources. Exploiting these vulnerabilities could allow a remo...

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services stems from incorrect restrictions on XML links to external objects. This allows attackers to carry out XXE attacks.

The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...