CVE-2026-117609 rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder

rtl433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2mc that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to...

CVE-2026-117609 rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder

rtl433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2mc that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to...

CVE-2026-117609 rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder

rtl433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2mc that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to...

CVE-2013-20008 Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20008

The Linksys WAG200G (firmware versions through 1.01.06 ) is vulnerable to a weak password change mechanism. An attacker with access to an authenticated administrator browser session can change the administrator password without providing the current password. This allows the attacker to lock out ...

EUVD-2013-7302

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20008 Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20007 Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and ru...

CVE-2013-20007

The Linksys WAG200G (firmware versions through 1.01.06 ) is vulnerable to an OS command injection flaw located in the timer_interval parameter of setup.cgi. This vulnerability allows authenticated attackers to execute arbitrary commands by injecting backtick-delimited input. A successful attack, ...

EUVD-2013-7301

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and ru...

CVE-2026-91110 - XSS using control bytes

More info at https://www.silverstripe.org/download/security-releases/cve-2026-91110...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

CLEANSTART-2026-IC52638 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...

EUVD-2026-111428

Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...

PT-2026-127795

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

PT-2026-128244

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0...

PT-2026-130598

This module allows for direct viewing of a file with the URL alias. This is a followup advisory to SA-CONTRIB-2026-245, which did not fully resolve the underlying vulnerability. In some cases, files may be served with the HTTP header Cache-Control: public when they should be uncacheable. This can...

PT-2026-130582

The AI module includes a submodule, AI Automator. This submodule allows you to automatically fill out fields using AI, based on other fields. The module doesn't sufficiently check access to text formats, allowing users to author field data in text formats they should not have access to...

CVE-2026-109411: Improper Handling of Case Sensitivity

An access control bypass flaw was identified in Samba's vfscephrgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfscephrgw module. When a client requests an existing file using...

Google Agent Development Kit permission and access control issue vulnerability

Versions prior to 1.39.1 of the Google Agent Development Kit contain a permission and access control vulnerability. Versions 1.19.0 and 2.0.0a1 prior to 2.7.0 are affected; this issue arises because FileArtifactService accepts appname in its public API methods but omits it when constructing disk...