CVE-2026-105285 Totolink A3002MU QoS Rule formIpQoS stack-based overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-105285 Totolink A3002MU QoS Rule formIpQoS stack-based overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

EUVD-2026-92383

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-105285

A stack-based buffer overflow vulnerability exists in the Totolink A3002MU (version 1.0.0-B20230403.1455) within the QoS Rule Handler component. Specifically, an unknown function in the /boafrm/formIpQoS file is affected. Manipulation of the addQos/comment/entry_name argument can trigger the over...

CVE-2024-6387

cve-2024-6387-poc OpenSSH के सर्वर sshd में एक signal handler race condition...

CVE-2026-105248

A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...

CVE-2026-105249

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses tomcat-embed-core-10.1.57.jar, netty-handler-4.1.135.Final.jar, gitpython 3.1.53, httpclient5-5.6.3.jar, and glibc 2.34-168.el96.23 which are vulnerable to CVE-2025-15281, CVE-2026-0861, CVE-2026-0915, CVE-2026-4046, CVE-2026-4437, CVE-2026-4438, CVE-2026-5435,...

EUVD-2026-92283

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2026-105251

The vgmstream software, specifically versions up to r2117 , contains an out-of-bounds read vulnerability in the VAG File Handler component. The issue originates from the ps_find_padding function within the src/coding/psx_decoder.c file. An attacker can trigger this vulnerability remotely through ...

CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

CVE-2025-24963

CVE-2025-24963 - Vitest Browser Mode - स्थानीय फ़ाइल पढ़ना ​CVE-2025-24963 एक मध्यम-गंभीरता वाली कमज़ोरी है CVSS 3.1 स्कोर: 5.9 जो @vitest/browser पैकेज को प्रभावित करती है, जो Vite द्वारा संचालित Vitest परीक्षण ढाँचे का एक घटक है। यह कमज़ोरी ब्राउज़र मोड HTTP सर्वर के screenshot-error हैंडलर में...

CVE-2026-105249

A use after free vulnerability exists in vgmstream up to version r2117 . The flaw is located within the TXTP File Handler component, specifically impacting the make_group_random function in the file src/meta/txtp_process.c . This issue can be triggered via a local attack . To remediate this vulne...

CVE-2026-105249 vgmstream TXTP File txtp_process.c make_group_random use after free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

EUVD-2026-92276

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105249 vgmstream TXTP File txtp_process.c make_group_random use after free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105249 vgmstream TXTP File txtp_process.c make_group_random use after free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105238

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...