9316 matches found
CVE-2026-1674
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization within the savegutenaformsschema function in all versions up to, and including, 1.6.0. This makes...
The vulnerability of the /goform/fast_setting_wifi_set file in the microprogramming software for Tenda RX3 routers allows a hacker to cause a service failure.
The vulnerability of the /goform/fastsettingwifiset function in the microprogramming software for Tenda RX3 routers lies in the copying of buffers without checking the size of the input data during the processing of the ssid5g parameter. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the fromSetIpMacBind function (/goform/SetIpMacBind) in the Tenda RX3 router software allows a attacker to cause a service failure.
The vulnerability of the fromSetIpMacBind function /goform/SetIpMacBind in the Tenda RX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the ath9k_hif_usb_rx_stream() function in the drivers/net/wireless/ath/ath9k/hif_usb.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a malicious actor to cause a service failure remotely.
The vulnerability of the ath9khifusbrxstream function in the drivers/net/wireless/ath/ath9k/hifusb.c module of the Atheros/Qualcomm wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...
The vulnerability of the goform/SetIpMacBind file in the Tenda RX3 router microprogramming software allows a hacker to cause a service failure.
The vulnerability of the /goform/openSchedWifi file in the microprogramming software for Tenda RX3 routers stems from the copying of buffers without checking the size of the input data during the processing of the schedStartTime/schedEndTime parameters. Exploiting this vulnerability could allow a...
The vulnerability of the formGetRebootTimer() function in the Tenda AC9 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formGetRebootTimer function in the Tenda AC9 router’s microprogramming software is related to the issue of data being written outside the buffer in memory when processing the parameters sys.schedulereboot.starttime/sys.schedulereboot.endtime. Exploiting this vulnerability...
Labkotec LID-3300IP
RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to gain unauthorized control over system operations, leading to disruption of normal functionality and potential safety hazards. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...
OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization
Summary Unauthorized senders could trigger two command paths without sender authorization checks: 1. stop-like natural-language abort triggers 2. /models command output Impact An unauthorized sender could disrupt active sessions and view model/auth metadata that should be authorization-gated. Fix...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the stop triggers and /models command. An attacker can disrupt active sessions and access sensitive model or authentication metadata by sending unauthorized...
OpenClaw Resource Management Error Vulnerability (CNVD-2026-13374)
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a Resource Management Error vulnerability that stems from an ACP bridge accepting too large a block of prompt text, which can be exploited by an attacker to cause problems with the processing of abnorm...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that is caused due to a path traversal error in multiple functions of MmsProvider.java resulting in a possible way of arbitrarily deleting files affecting phone...
The vulnerability of the tcp_add_backlog() function in the net/ipv4/tcp_ipv4.c module, which is part of the Linux operating system’s IPv4 protocol implementation, allows a hacker to cause a service failure.
The vulnerability of the tcpaddbacklog function in the net/ipv4/tcpipv4.c module, which is part of the Linux operating system’s IPv4 protocol implementation, involves integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service...
The vulnerability of the ath11k_peer_rx_frag_setup() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ath11kpeerrxfragsetup function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...
CVE-2024-10938
The CVE-2024-10938 entry concerns the OVRI Payment WordPress plugin (v1.7.0). The connected documents describe malicious ".htaccess" files included with the plugin that contain directives intended to block execution of certain scripts while permitting execution of selected malicious PHP files. If...
CVE-2024-10938 OVRI Payment 1.7.0 - Malicious .htaccess directive
The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0. The files contain directives to prevent the execution of certain scripts while allowing execution of known malicious PHP files. If moved outside of the plugin's directory, they may interfere with the proper...
Improper Resource Shutdown or Release
Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the handleRequestInternal function of the Session Handler component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation There is no fixed versi...
WordPress plugin OVRI Payment 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
The vulnerability of the add_all_parents() function in the fs/btrfs/backref.c file of the btrfs file system in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the addallparents function in the fs/btrfs/backref.c file of the btrfs file system in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
