ATSUMI Electric ADX5004: Processing logic error vulnerability

The ATSUMI Electric ADX5004 has a processing logic vulnerability. This vulnerability stems from a hidden function issue, allowing users with administrator privileges to execute arbitrary operating system commands...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability stemming from post-release reuse in DOM, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formTR069Config function. An authenticated attacker can exploit this vulnerability by sending a specially crafted HTTP...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formMapDelDevice hostname function. Authorized attackers can exploit this vulnerability through specially crafted HTTP requests, resulting in arbitrary code execution...

Google Chrome Resource Management Error Vulnerability

Google Chrome versions prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from reuse of resources after release in SiteIsolation. A remote attacker can execute arbitrary code within a sandbox by using a specially crafted HTML page...

DokuWiki.org DokuWiki deserialization injection vulnerability

DokuWiki.org: Versions prior to DokuWiki 2026-07-14c contained a deserialization injection vulnerability. This vulnerability stemmed from the use of Draft::getDraftText, which passed the content of the draft file to unserialize, without restricting the classes allowed. Authentication users with...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from a stack buffer overflow in the boa formIpQos mac function. Attackers can exploit this vulnerability by sending specially crafted HTTP requests, resulting in arbitrary code execution...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the dhcpdns1 parameter within the boa formIpv6Setup dhcpdns functionality. specially crafted HTTP requests can lead to arbitrary cod...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from an stack buffer overflow in the vpnUser parameter of the boa formFilter function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

IBM Carbon Charts Cross-Site Script Vulnerabilities

The IBM Carbon Charts versions 0.4.0 to 1.27.19 have a cross-site scripting vulnerability. This vulnerability stems from the Title.truncateTitle function in the MeterChart component. When the title exceeds the available width of the container, the function reinserts the user-provided tag text...

FlexGet path traversal vulnerability

Versions of FlexGet prior to 3.20.7 have a path traversal vulnerability. This vulnerability stems from the decompress plugin, which has a path traversal flaw. Attackers can use feeds that contain zip or rar archives with "../ sequences or absolute paths" to write arbitrary files. This may result ...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formUpload function, which may allow authenticated attackers to execute arbitrary code through specially crafted HTTP...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the pppoedns1 parameter within the boa formIpv6Setup pppoe functionality, potentially allowing authenticated attackers to execute arbitrary code via specially crafted HTTP requests...

LINE LIFF Cross-Site Scripting Vulnerability

The LINE LIFF SDK versions 2.20.0 to 2.31.0 have a cross-site scripting vulnerability. This vulnerability stems from a DOM-based cross-site scripting issue. When a user opens a specially crafted URL in an external browser, an attacker can execute arbitrary JavaScript on the affected LIFF...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in ContextualSearch; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in the boa formUpload function. A specially crafted HTTP request can lead to arbitrary code execution...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the improper handling of the staticgw parameter by the boa formIpv6Setup static network configuration function. A stack buffer overflow may allow attackers to execute arbitrary code through authenticated HTTP...

TOTOLINK X2000R Command Injection Vulnerability

TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formWizard newPass function. Special HTTP requests may lead to arbitrary code execution...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formPasswordSetup function. Attackers can execute arbitrary code through specially crafted HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the handling of the staticipv6 parameter by the boa formIpv6Setup static network configuration function, which may lead to a stack buffer overflow. This could allow authenticated attackers to execute arbitrary...