Lucene search
+L

48663 matches found

Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.16 views

PT-2026-35210

A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument menufacturer/Go can lead to buffer overflow. The attack may be performed from remote. The exploit has been made...

9CVSS5.8AI score0.00632EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.29 views

PT-2026-35200

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly...

9CVSS8.8AI score0.00632EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.13 views

PT-2026-35209

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00311EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.21 views

PT-2026-35199

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.2AI score0.00338EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/04/26 12:00 a.m.13 views

PT-2026-35235

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published a...

9CVSS5.8AI score0.00632EPSS
SaveExploits1References5
NVD
NVD
added 2026/04/25 8:16 p.m.15 views

CVE-2026-6995

A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...

4.8CVSS0.00245EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/25 7:15 p.m.6 views

CVE-2026-6995 BDCOM P3310D New User index.asp cross site scripting

A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...

4.8CVSS3.1AI score0.00245EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/25 7:15 p.m.15 views

EUVD-2026-25671

A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...

4.8CVSS3.3AI score0.00245EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/25 7:15 p.m.22 views

CVE-2026-6995

CVE-2026-6995 concerns BDCOM P3310D (firmware 0.4.2, 10.1.0F Build 86345) and its /index.asp New User Page. The vulnerability arises from manipulating the User name argument, enabling cross-site scripting (XSS). The issue is exploitable remotely and public exploits exist. Documented impact is lim...

4.8CVSS3.3AI score0.00245EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/25 7:15 p.m.10 views

CVE-2026-6995

A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...

4.8CVSS3.1AI score0.00245EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/25 7:15 p.m.52 views

CVE-2026-6995 BDCOM P3310D New User index.asp cross site scripting

A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...

4.8CVSS0.00245EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/25 6:16 p.m.12 views

CVE-2026-6991

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS0.00233EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/25 6:16 p.m.12 views

CVE-2026-6990

A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigawf/app/responsavel/novo. Performing a manipulation of the argument Nome/Descrição results in cross site scripting. The attack can be initiated remotely. The exploit has been made...

5.1CVSS0.00249EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/25 5:45 p.m.63 views

CVE-2026-6991

The CVE concerns colinhacks Zod up to 4.3.6, specifically the CUID Data Type Handler in packages/zod/src/v4/core/regexes.ts. The vulnerability arises from a manipulated input to an unknown function, enabling SQL injection. It is a remote attack and exploitation is indicated by public disclosures ...

6.5CVSS6.3AI score0.00233EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/25 5:45 p.m.9 views

CVE-2026-6991

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS6.3AI score0.00233EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/25 5:45 p.m.8 views

CVE-2026-6991 colinhacks Zod CUID Data Type regexes.ts sql injection

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS6.4AI score0.00233EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/25 5:45 p.m.49 views

CVE-2026-6991 colinhacks Zod CUID Data Type regexes.ts sql injection

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS0.00233EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/25 5:45 p.m.21 views

EUVD-2026-25667

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS6.3AI score0.00233EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/25 5:30 p.m.7 views

CVE-2026-6990

A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigawf/app/responsavel/novo. Performing a manipulation of the argument Nome/Descrição results in cross site scripting. The attack can be initiated remotely. The exploit has been made...

5.1CVSS3.6AI score0.00249EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/04/25 5:30 p.m.10 views

EUVD-2026-25666

A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigawf/app/responsavel/novo. Performing a manipulation of the argument Nome/Descrição results in cross site scripting. The attack can be initiated remotely. The exploit has been made...

5.1CVSS3.6AI score0.00249EPSS
SaveExploits0References6
Rows per page
Query Builder