Lucene search
+L

1810 matches found

Cvelist
Cvelist
added 2026/04/06 2:15 a.m.42 views

CVE-2026-5612 Belkin F9K1015 formWlEncrypt stack-based overflow

A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

9CVSS0.00687EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/04/06 2:00 a.m.35 views

CVE-2026-5611 Belkin F9K1015 formCrossBandSwitch stack-based overflow

A vulnerability was found in Belkin F9K1015 1.00.10. This affects the function formCrossBandSwitch of the file /goform/formCrossBandSwitch. Performing a manipulation of the argument webpage results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made...

9CVSS0.00687EPSS
SaveExploits1References4
CVE
CVE
added 2026/04/06 12:30 a.m.16 views

CVE-2026-5608

Belkin F9K1122, firmware 1.00.33, contains a vulnerability in the function formWlanSetup (/goform/formWlanSetup) that allows a stack-based buffer overflow when the webpage argument is manipulated. The issue is exploitable remotely, and public exploits exist. Multiple sources in the connected set ...

9CVSS7.7AI score0.00725EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.14 views

PT-2026-30557

A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

9CVSS6.4AI score0.00687EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.11 views

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability arises from improper handling of the webpage parameter in the function formReboot within the file/goform/formReboot...

9CVSS7.7AI score0.00687EPSS
SaveExploits1References4
Circl
Circl
added 2026/04/01 11:25 a.m.9 views

CVE-2026-23411

creationtimestamp| type| source ---|---|--- 2026-04-01 11:25:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miglfjzl5p22 2026-04-02 17:37:03+00:00| seen| Telegram/37miVMXR04DKfwyt7TTlg-rZzunXudUntV94ZrNBpzOyTo 2026-04-07 18:00:00+00:00| seen|...

7.8CVSS5.1AI score0.00145EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/01 4:41 a.m.7 views

CVE-2026-5280

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

6.3CVSS6.2AI score0.00385EPSS
SaveExploits0References3Affected Software1
Redos
Redos
added 2026/04/01 12:00 a.m.15 views

ROS-20260401-73-0002

A vulnerability in RoundCube Webmail email client is related to the failure to take measures to protect the structure of a web page. Exploitation of the vulnerability could allow an attacker acting remotely to conduct cross-site scripting XSS attacks...

7.2CVSS6AI score0.20779EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2026/03/31 11:28 p.m.9 views

SUSE CVE-2026-20691

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user...

4.3CVSS5.8AI score0.00276EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/03/30 12:00 a.m.20 views

PT-2026-46554

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Insufficient policy enforcement in Navigation allows a remote attacker to bypass the content security policy CSP, which is a security layer that helps detect and mitigate...

9.6CVSS5.9AI score0.00985EPSS
SaveExploits5References438
EUVD
EUVD
added 2026/03/29 12:31 p.m.9 views

EUVD-2026-16989

A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the file /goform/formSetPassword of the component Parameter Handler. This manipulation of the argument webpage causes stack-based buffer overflow. Remote exploitation of the attack is...

9CVSS6.2AI score0.00793EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/29 11:16 a.m.8 views

CVE-2026-5042

A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch of the file /goform/formCrossBandSwitch of the component Parameter Handler. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be...

9CVSS0.00673EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/03/29 12:00 a.m.10 views

PT-2026-28750

Name of the Vulnerable Software and Affected Versions Belkin F9K1122 version 1.00.33 Description A security issue exists in Belkin F9K1122 1.00.33. The issue involves a stack-based buffer overflow in the formCrossBandSwitch function located in the /goform/formCrossBandSwitch file within the...

9CVSS6.2AI score0.00673EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/03/29 12:00 a.m.37 views

Belkin F9K1122 安全漏洞

The Belkin F9K1122 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.33 of the Belkin F9K1122 contains a security vulnerability. This vulnerability stems from improper handling of the webpage parameter in the file/goform/formSetPassword, which may lead to a stack...

9CVSS7.7AI score0.00793EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/03/28 12:00 a.m.27 views

PT-2026-28752

Name of the Vulnerable Software and Affected Versions Belkin F9K1122 version 1.00.33 Description A security issue has been identified in Belkin F9K1122 version 1.00.33. The formSetSystemSettings function within the Setting Handler component, located in the /goform/formSetSystemSettings file, is...

9CVSS6.3AI score0.00663EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.12 views

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

8.8CVSS7.6AI score0.01738EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:25 p.m.11 views

CVE-2021-27465

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorre...

6.1CVSS6.9AI score0.00642EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.6 views

CVE-2026-32403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM-Based XSS.This issue affects Toocheke Companion: from n/a through = 1.194...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.11 views

CVE-2026-20691

A flaw was found in WebKitGTK. A maliciously crafted web page can cause an authorization issue due to improper state management and may be able to fingerprint the user. Mitigation Do not visit untrusted web pages or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the...

4.3CVSS5.9AI score0.00276EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/03/26 3:06 p.m.10 views

CVE-2026-4220

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manipulation of the argument targetPath/Suffix leads to unrestricted upload. The attack may be initiated remotely. The...

7.5CVSS6.6AI score0.00309EPSS
SaveExploits0References1
Rows per page
Query Builder