8974 matches found
CVE-2026-7219
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entryname can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...
MINI-74MR-2QQ7-CHFP
Bulletin has no description...
MINI-J9VC-JXRR-4M7R
Bulletin has no description...
CVE-2026-7219 Totolink N300RT formIpQoS buffer overflow
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entryname can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...
CVE-2026-7219 Totolink N300RT formIpQoS buffer overflow
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entryname can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...
CVE-2026-7219
In Totolink N300RT (firmware 3.4.0-B20250430), a flaw exists in the function handling /boafrm/formIpQoS. Crafting the argument entry_name can trigger a buffer overflow, potentially exploitable remotely. CVSS vectors indicate HIGH impact to confidentiality, integrity, and availability with network...
CVE-2026-7206 dubydu sqlite-mcp entry.py extract_to_json sql injection
A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...
TOTOLINK N300RT 缓冲区错误漏洞
The TOTOLINK N300RT is a wireless router from TOTOLINK Corporation that complies with the 802.11n standard. The version 3.4.0-B20250430 of the Totolink N300RT has a buffer error vulnerability. This vulnerability stems from a buffer overflow in the entryname parameter of the /boafrm/formIpQoS file...
MINI-WQ86-XPC3-RWW2
Bulletin has no description...
MINI-5VRJ-XM9R-FW8V
Bulletin has no description...
MINI-Q9QV-PC5X-WMR8
Bulletin has no description...
MINI-HM38-679P-8V4P
Bulletin has no description...
kernel: macvlan: fix possible UAF in macvlan_forward_source()
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlanforwardsource Add RCU protection on struct macvlansourceentry-vlan. Whenever macvlanhashdelsource is called, we must clear entry-vlan pointer before RCU grace period starts. This allows...
JLSEC-2026-212
util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privilege...
MINI-G3CR-FR7V-3VWP
Bulletin has no description...
MINI-3GXQ-VP83-7GRC
Bulletin has no description...
MINI-FPC5-8856-7RXM
Bulletin has no description...
FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a heap buffer overflow vulnerability in the resizevbarentry function. This occurs when an error in buffer resizing leads to attacker-controlled pixel data being written into an...
