Belkin F9K1122 安全漏洞

The Belkin F9K1122 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.33 of the Belkin F9K1122 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

WeGIA 输入验证错误漏洞

WeGIA is a network manager for a welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.9 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation or restrictions on the nextPage parameter, which could lead to...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The version 1.00.10 of the Belkin F9K1015 contains a security vulnerability. This vulnerability arises from improper handling of the page parameter in the function formSetFirewall within the goform/formSetFirewa...

Belkin F9K1015 安全漏洞

The Belkin F9K1015 is a WiFi signal extender produced by the Canadian company Belkin. The Belkin F9K1015 version 1.00.10 contains a security vulnerability. This vulnerability stems from incorrect handling of the “page” parameter, which may lead to a stack buffer overflow attack...

CVE-2019-25668 News Website Script 2.0.5 SQL Injection via index.php

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive...

CVE-2026-5210

A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an unknown part. Performing a manipulation of the argument page results in file inclusion. Remote exploitation of the attack is possible. The exploit is now public and may be used...

VulnCheck KEV: CVE-2026-4020

The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permissioncallback that unconditionally returns true, allowing any...

CVE-2021-27526

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...

EUVD-2026-16470

A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...

CVE-2024-46878

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

PT-2026-28659

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll Management System version 1.0 Description A security flaw exists in itsourcecode Payroll Management System version 1.0. The issue affects an unknown function within the /index.php file. Manipulation of the page argument ca...

EUVD-2024-55494

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

CVE-2024-46878

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

CVE-2024-46878

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

CVE-2024-46878

CVE-2024-46878 describes an XSS flaw in Tiki Wiki CMS Groupware, affecting tiki-editpage.php parameter handling in Tiki

CVE-2024-51223

The CVE-2024-51223 entry describes a stored XSS in Phpgurukul Vehicle Record Management System v1.0, specifically in the /admin/profile.php component. An attacker can inject arbitrary script/HTML through the Mobile Number parameter, enabling execution in a victim’s browser. The available details ...

CVE-2026-4553

CVE-2026-4553 affects the Tenda F453 1.0.0.3 router. The vulnerability is in the Parameters Handler, specifically the function fromNatlimit in the file /goform/Natlimit, where manipulating the page argument triggers a stack-based buffer overflow. It is described as remotely exploitable, with a pu...

EUVD-2026-14297

A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/loginpage can lead to cross site scripting. It is possible to launch the...

CVE-2026-4544

CVE-2026-4544 affects Wavlink WL-WN578W2 221110. The vulnerability is in the POST Request Handler’s /cgi-bin/login.cgi, where manipulating the argument homepage/hostname/login_page can trigger cross-site scripting. Exploitation is possible remotely, and public exploit activity is indicated. No ve...