PT-2026-91890

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf node activate ex of the file scenegraph/base scenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly...

PT-2026-91773

Name of the Vulnerable Software and Affected Versions GNU libextractor versions prior to 1.15 Description A stack-based buffer overflow occurs in the process star office function. The issue arises when the function determines the size of a variable-length stack array using attacker-controlled OLE...

PT-2026-91875

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx process of the file filters/reframe mpgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-76873: Improper Neutralization of Input During Web Page Generation

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...

CVE-2026-76869: Stack-based Buffer Overflow

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboottimerset.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...

CVE-2026-76861: Stack-based Buffer Overflow

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

CVE-2026-76860: Stack-based Buffer Overflow

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

CVE-2026-76704: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access...

CVE-2026-76703: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system...

CVE-2026-32599: Improper Neutralization of Special Elements used in an SQL Command

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...

CVE-2026-76689: Stack-based Buffer Overflow

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

CVE-2026-56967: Heap-based Buffer Overflow

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0200: Heap-based Buffer Overflow

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-91826: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39...

CVE-2026-91086: Heap-based Buffer Overflow

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-91003: Stack-based Buffer Overflow

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

PT-2026-93203

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot timer set.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...

PT-2026-93194

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake up set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

PT-2026-92417

Name of the Vulnerable Software and Affected Versions Netmaker versions prior to 1.5.0 Description An authenticated attacker can perform boolean-based SQL injection when the SQLite database backend is used. The issue occurs because the sqliteDeleteRecord function in the database layer constructs...

PT-2026-93215

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Edge Chromium-based, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect th...