CVE-2026-7056

Affected product: Tenda F456 (firmware 1.0.0.5). Vulnerable component: httpd, function fromSafeUrlFilter in /goform/SafeUrlFilter. Issue: manipulation of the argument page leads to a buffer overflow. Exploitability: remote, with public exploit available. Impact: high-severity across confidentiali...

CVE-2026-7056 Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow

A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be...

CVE-2026-7101

creationtimestamp| type| source ---|---|--- 2026-04-26 09:43:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116470357386241515 2026-04-26 11:01:05+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116470662134946577 2026-05-28 16:07:09+00:00| seen|...

CVE-2026-5721

creationtimestamp| type| source ---|---|--- 2026-04-26 05:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mketeuripb2c 2026-07-13 12:15:14+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqjo7gvp7w2k 2026-07-13 14:45:22+00:00| seen|...

CVE-2026-7021 SmythOS sre Connector Service utils.ts information disclosure

A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...

CVE-2024-32692

creationtimestamp| type| source ---|---|--- 2026-04-26 03:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkemnygc5s2x...

GHSA-C4QG-J8JG-42Q5

creationtimestamp| type| source ---|---|--- 2026-04-26 03:29:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkemho5wntb2 2026-04-26 07:57:04+00:00| seen|...

CVE-2026-7002

creationtimestamp| type| source ---|---|--- 2026-04-26 02:04:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkehpzisv627...

Tenda F456 缓冲区错误漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of the page parameter in the fromSafeUrlFilter function of the goform/SafeUrlFilter module in the...

PT-2026-35202

A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...

CVE-2026-4125

creationtimestamp| type| source ---|---|--- 2026-04-25 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mke3vkobu22i...

CVE-2025-49867

creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukeft52x...

CVE-2025-31918

creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:12+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukbvpi2g...

Server-side Request Forgery (SSRF)

Overview pagekit/pagekit is a modular and lightweight CMS built with Symfony components and Vue.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the url argument in the /index.php/admin/system/update/download process. An attacker can access internal...

CVE-2026-6983

A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit i...

EUVD-2026-25659

A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit i...

GHSA-6FW5-F8R9-FGFM

creationtimestamp| type| source ---|---|--- 2026-04-25 11:36:33+00:00| seen| https://gist.github.com/dims/bd766118ae32d646ea9f127ac51c3054...

CVE-2026-41163

creationtimestamp| type| source ---|---|--- 2026-04-25 11:17:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkcw5o2cdu2s 2026-05-09 05:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfisnqiqh2e...

CVE-2026-31682

creationtimestamp| type| source ---|---|--- 2026-04-25 10:06:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464783504751353 2026-04-25 20:30:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467237575005440 2026-05-05 20:00:00+00:00| seen|...

CLSA-2026-1776878817 squid: Fix of 13 CVEs

CVE-2018-1000027: fix NULL pointer dereference in clientFollowXForwardedForCheck for transactions without a client connection - CVE-2018-19131: fix XSS via X.509 certificate fields rendered unescaped in SSL error pages - CVE-2019-12520: prevent cache poisoning by suppressing URL userinfo from...