CVE-2026-35398 WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos & listarIdNome and...

EUVD-2026-19496

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The...

CVE-2026-35396

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The...

WeGIA 输入验证错误漏洞

WeGIA is a network manager for a welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.9 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation or restrictions on the nextPage parameter, which could lead to...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability arises from improper handling of the page parameter in the function formSetSystemSettings within the...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability arises from improper handling of the page parameter in the function formSetFirewall within the goform/formSetFirewa...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

Belkin F9K1122 安全漏洞

The Belkin F9K1122 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.33 of the Belkin F9K1122 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability stems from improper handling of the page parameter in the formSetPassword function within the goform/formSetPasswor...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

Tenda CX12L 安全漏洞

The Tenda CX12L is a home-use wireless router device from the Chinese company Tenda. The version 16.03.53.12 of the Tenda CX12L contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/P2pListFilter, specifically the page parameter, whic...

CVE-2019-25668 News Website Script 2.0.5 SQL Injection via index.php

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive...

CVE-2026-5210

A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an unknown part. Performing a manipulation of the argument page results in file inclusion. Remote exploitation of the attack is possible. The exploit is now public and may be used...

VulnCheck KEV: CVE-2026-4020

The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permissioncallback that unconditionally returns true, allowing any...

CVE-2021-27526

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...

EUVD-2026-16470

A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...

CVE-2024-46878

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

PT-2026-28659

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll Management System version 1.0 Description A security flaw exists in itsourcecode Payroll Management System version 1.0. The issue affects an unknown function within the /index.php file. Manipulation of the page argument ca...

EUVD-2024-55494

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...