62465 matches found
CVE-2026-5606
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the atta...
PT-2026-30619
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-30569
A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been...
RiteCMS 3.1.0 - Authenticated Remote Code Execution
Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution Date: 2025-10-26 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/handylulu/RiteCMS Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip Version: 3.1.0 Tested on: Window...
PT-2026-30750
A vulnerability was detected in Totolink A7100RU 7.4cu.2313 b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now...
PT-2026-30623
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
The vulnerability of the Delete() function in the Go programming language, which allows a hacker to trigger a service failure
The vulnerability of the Delete function in the Go programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the RDP client FreeRDP, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.
The vulnerability of the RDP client FreeRDP is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
UTT HiPER 810G 安全漏洞
UTT HiPER 810G is a firewall router produced by UTT Corporation. The UTT HiPER 810G v3v1.7.7-171114 version contains a security vulnerability. This vulnerability stems from a buffer overflow in the selDateType parameter of the formTaskEdit function, which may lead to a denial-of-service attack...
CVE-2026-31061
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
RHEL 9 : vim (RHSA-2026:6620)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6620 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary code execution via 'helpfile' optio...
The vulnerability of the swf_def_bits_jpeg function in the MP4Box packaging engine of the GPAC multimedia platform, related to buffer overflow in the stack, allows attackers to cause service failures.
The vulnerability of the swfdefbitsjpeg function in the MP4Box packaging engine of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2026-31066
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31066
The CVE-2026-31066 entry applies to the UTT Aggressive HiPER 810G, version v3v1.7.7-171114. The root cause is a buffer overflow in the selDateType parameter of the formTaskEdit function, enabling a Denial of Service via a crafted input. Several connected sources corroborate the same description. ...
RHEL 7 : vim (RHSA-2026:6617)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6617 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary code execution via 'helpfile' optio...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an unvalidated extension header type index. This vulnerability may lead to out-of-bound reads and...
CVE-2026-31405
In the Linux kernel, the following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ulemandatoryexthandlers and uleoptionalexthandlers tables in handleoneuleextension are declared with 255 elements valid indices 0-254, but the index htype is deriv...
CVE-2026-31066
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31061
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-30558
A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform/formReboot. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be...