CVE-2026-124509

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-124509 floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName path traversal

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-124509 floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName path traversal

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

EUVD-2026-119770

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-124509

A path traversal vulnerability exists in floci-io Floci versions up to 2.1.0 within the S3 Destination Configuration Handler component. The root cause is improper handling of the BucketARN argument in the S3Destination.bucketName function located in services/firehose/model/DeliveryStreamDescripti...

CVE-2026-124509 floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName path traversal

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-124509: floci-io Floci: A vulnerability was identified in floci-io Floci up to 2.1.0

A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads t...

CVE-2026-122151

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-122151 Presenton User Configuration user-config JSON.parse cross-site request forgery

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

EUVD-2026-117203

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-122151 Presenton User Configuration user-config JSON.parse cross-site request forgery

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-122151

A security vulnerability exists in Presenton versions up to 0.9.11-beta within the User Configuration Handler component. Specifically, the JSON.parse function in the /api/user-config file is susceptible to manipulation, which can lead to cross-site request forgery (CSRF) . This attack can be laun...

PT-2026-137247

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-121598

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121598

A stack-based buffer overflow vulnerability exists in the Basic Wireless Configuration Handler component of TOTOLINK A950RG version 4.1.2cu.5268_B20221104 . The flaw is located in the strcpy function of the /cgi-bin/cstecgi.cgi file, where improper handling of the wepkey argument allows for remot...

CVE-2026-121598 TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

EUVD-2026-116667

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121598: TOTOLINK A950RG: A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

TOTOLINK a950rg firmware buffer error vulnerability

The TOTOLINK a950rg firmware version 4.1.2cu.5268B20221104 contains a buffer error vulnerability. This vulnerability stems from improper handling of the “wepkey” parameter by the strcpy function in the file /cgi-bin/cstecgi.cgi within the Basic Wireless Configuration Handler component. It may lea...

PT-2026-136763

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268 B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possib...