Tenda F453 Router fromSetCfm() Code Execution

The vulnerability of the fromSetCfm function /goform/setcfm of the Tenda F453 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the funcname and funcpara1 parameters. Exploiting this vulnerability allows a remote attacker to execute...

ROS-20260626-73-0026

The vulnerability in rubygem-rdiscount relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260626-73-0040

The vulnerability of the ngxquicmodule module in NGINX Plus and NGINX Open Source web servers relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

UTT HiPER 810G strcpy Buffer Overflow DoS

The vulnerability of the strcpy function /goform/formApMail in the UTT HiPER 810G router software lies in the fact that the operation’s results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda i3 Wireless Access Point Code Execution

The vulnerability of the formWifiMacFilterGet function /goform/WifiMacFilterGet in the Tenda i3 wireless access point software is related to the operation of writing data outside of the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow a malicious act...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the selector lexer process. An attacker can cause a panic and potentially disrupt service availability by providing a quoted string with a trailing backslash. Remediation There is no fixed version...

ROS-20260625-73-0016

The vulnerability of the ASN.1 library Libtasn1 is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux net/ipv6 icmp Heap Buffer Overflow DoS

The vulnerability of the ip6errgenicmpv6unreach function in the net/ipv6/icmp.c module of the Linux operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or caus...

ROS-20260625-73-0018

The vulnerability in frr is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260625-73-0029

The vulnerability of the FFmpeg multimedia library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a corrupted audio file...

Linux driver module Heap Buffer Overflow DoS

The vulnerability in the drivers/hid/hid-core.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the net/core/dev.ct module in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Cluster NDB Operator Privilege Escalation

Vulnerability of the Cluster component: The NDB Operator technology for distributed data storage in MySQL NDB Cluster is vulnerable due to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and cause service failures using the HTTP...

CVE-2026-52926

A flaw was found in the Linux kernel's batman-adv module, which is responsible for managing mesh networks. When a mesh network is being shut down, the system fails to properly clear the active gateway information. This leaves outdated network configuration data, which can prevent the mesh network...

Astra Linux – Vulnerability in grub2

A vulnerability has been identified in the GRUB2 bootloader’s network module, posing an immediate Denial of Service DoS risk. This flaw is a use-after-free issue, as the netsetvlan command is not properly unregistered when the network module is unloaded from memory. An attacker who can execute th...

PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

CVE-2026-56262

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

PYSEC-0000-CVE-2026-56262

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

EUVD-2026-38745

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...