📄 Docmost Cross Site Scripting

Docmost versions prior to 0.71.0 suffer from a persistent cross site scripting vulnerability. CVE-2026-34212 Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin. Intro I...

PT-2026-53029

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.74.0 Statamic versions prior to 6.20.3 Description The Live Preview endpoint for existing entries and terms in src/Http/Controllers/CP/PreviewController.php only verifies view authorization but accepts and renders...

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a remote attacker to cause a service failure by sending specially...

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.

The vulnerability of D-Link DIR-513 router’s microprogramming software is related to the fact that the operation results are written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.

The vulnerability of D-Link DIR-513 router’s microprogrammed software is related to the issue where the operation data is written outside the buffer in memory when processing the nextPage parameter. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.

The vulnerability of D-Link DIR-513 router’s microprogrammed software is related to the operation of writing data outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the formEasySetTimezone() function (/goform/formEasySetTimezone), a built-in microprogramming software function of the D-Link DIR-513 router’s web server, allows a malicious actor to cause a service failure.

The vulnerability of the formEasySetTimezone function /goform/formEasySetTimezone in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could...

The vulnerability of D-Link DIR-513 router microprogramming software, related to buffer overflows, allows attackers to execute arbitrary code and trigger service failures.

The vulnerability of D-Link DIR-513 router microprogramming software is related to buffer overflow when processing the curTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...

The vulnerability of D-Link DIR-513 router microprogramming software, caused by buffer overflows, allows attackers to execute arbitrary code and trigger a service failure.

The vulnerability of D-Link DIR-513 router microprogramming software arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device’s functionality.

The vulnerability of D-Link DIR-513 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the webPage parameter. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of D-Link DIR-513 router’s microprogramming software, related to the operation of writing data outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of D-Link DIR-513 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing the webpage parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...

The vulnerability of the sub_3C6C0() function (/goform/QuickIndex) in the Tenda F453 router’s microprogramming system allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the sub3C6C0 function /goform/QuickIndex of the Tenda F453 router’s microprogramming system is related to the operation that goes beyond the buffer in memory when processing parameters mitlinktype and PPPOepassword. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the setSystemAdmin() function in D-Link DCS-931L microprogrammed camera software allows a intruder to execute arbitrary commands.

The vulnerability of the setSystemAdmin function in D-Link DCS-931L microprogrammed camera software exists because measures are not taken to neutralize the special elements used in the operating system’s processing of the AdminID parameter. Exploiting this vulnerability allows a remote attacker t...

The vulnerability of D-link DIR-823X router microprogramming software, which exists due to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of D-link DIR-823X router microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of D-link DIR-823X router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the hi846_set_ctrl() function in the drivers/media/i2c/hi846.c module of the Linux operating system’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the hi846setctrl function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver framework is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xvip_graph_dma_init() function in the drivers/media/platform/xilinx/xilinx-vipp.c module of the Linux operating system’s multimedia device driver, which allows a hacker to cause a service failure.

The vulnerability of the xvipgraphdmainit function in the drivers/media/platform/xilinx/xilinx-vipp.c module of the Linux kernel’s multimedia device driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-56786

creationtimestamp| type| source ---|---|--- 2026-06-25 23:44:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5mddcyuc2u 2026-06-26 12:10:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp6vzhl4h72q 2026-06-27 17:07:07+00:00| seen|...

CVE-2026-6679

creationtimestamp| type| source ---|---|--- 2026-06-25 23:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5koutula2a 2026-06-30 14:37:17+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpja36wkfh2v...

CVE-2026-13283

creationtimestamp| type| source ---|---|--- 2026-06-25 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813263698329595 2026-06-26 09:45:07+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen|...