CVE-2026-27508 Smoothwall Express < 3.1 Update 13 Reflected XSS in redirect.cgi via url Parameter

Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can craft malicious URLs with javascript: schemes that execute arbitrary JavaScript in victims' browse...

Smoothwall Express 跨站脚本漏洞

Smoothwall Express is an open-source firewall operating system based on GNU/Linux, developed by Smoothwall. Versions of Smoothwall Express prior to 3.1 Update 13 had a cross-site scripting vulnerability. This vulnerability stemmed from improper cleaning of URL parameters, which could lead to...

CVE-2026-2370

CVE-2026-2370 affects GitLab CE/EE across multiple older branches (14.3 before 18.8.7, 18.9 before 18.9.3, 18.10 before 18.10.1) and relates to Jira Connect installations. The issue allowed an authenticated user with minimal workspace permissions to obtain installation credentials and impersonate...

Tenda 4G06 安全漏洞

Tenda 4G06 is a wireless router produced by the Chinese company Tenda. Version 04.06.01.29 of Tenda 4G06 contains a security vulnerability. This vulnerability arises from improper handling of parameters in the file/goform/DhcpListClient, which may lead to a stack buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2016-20040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute...

CVE-2016-20040 TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter

TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and...

CVE-2016-20039

CVE-2016-20039 affects Multi Emulator Super System 0.154-3.1. The vulnerability is a buffer overflow in the gamma parameter handling that permits a local attacker to crash the application or execute arbitrary code by supplying an oversized gamma value, overflowing a stack buffer and overwriting t...

Tenda AC5 安全漏洞

Tenda AC5 is a wireless router produced by the Chinese company Tenda. Version 15.03.06.47 of Tenda AC5 contains a security vulnerability. This vulnerability stems from improper handling of parameters in the file/goform/WifiWpsOOB, which may lead to a stack buffer overflow...

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router produced by the Chinese company Tenda. Version 15.03.05.19 of the Tenda AC15 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/setcfm, specifically funcpara1. It may lead to a stack-based buffer...

SourceCodester Online Quiz System 安全漏洞

The SourceCodester Online Quiz System is an open-source online Q&A system developed by SourceCodester. Versions of the SourceCodester Online Quiz System prior to 1.0 contained security vulnerabilities. These vulnerabilities were caused by incorrect handling of parameters in the file...

Code-Projects Online Food Ordering System 代码注入漏洞

Code-Projects Online Food Ordering System is an open-source online meal ordering system developed by Code-Projects. Version 1.0 of the Code-Projects Online Food Ordering System contains a code injection vulnerability. This vulnerability arises from incorrect handling of parameters in the...

itsourcecode Free Hotel Reservation System 代码问题漏洞

itsourcecode Free Hotel Reservation System is an open-source hotel reservation system developed by itsourcecode. Version 1.0 of the system has code-related vulnerabilities; these vulnerabilities stem from incorrect handling of parameters in the file admin/modamenities/index.php?view=add, which ma...

Jeson Customer Relationship Management System 代码问题漏洞

Jeson Customer Relationship Management System is a lightweight customer relationship management system developed by DefaultFunction’s individual developer. The Jeson Customer Relationship Management System has code vulnerabilities; these vulnerabilities stem from incorrect handling of parameters ...

Tenda A15 安全漏洞

The Tenda A15 is a WiFi extender produced by the Chinese company Tenda. Version 15.13.07.13 of the Tenda A15 contains a security vulnerability. This vulnerability stems from improper handling of the File parameter in the UploadCfg function located at /file/cgi-bin/UploadCfg. It may lead to a...

Wavlink WL-WN578W2 代码注入漏洞

Wavlink WL-WN578W2 is a wireless repeater produced by Wavlink Corporation. The Wavlink WL-WN578W2 version 221110 contains a code injection vulnerability. This vulnerability stems from incorrect handling of parameters such as homepage/hostname/loginpage in the POST request processing component,...

Tenda F453 安全漏洞

The Tenda F453 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.3 of the Tenda F453 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/VirtualSer, which may lead to a stack buffer overflow...

itsourcecode Online Frozen Foods Ordering System SQL注入漏洞

itsourcecode Online Frozen Foods Ordering System is an open-source online frozen food ordering system developed by itsourcecode. Version 1.0 of the system has a SQL injection vulnerability, which arises from incorrect handling of the parameter productname in the file admin/admin/editmenuaction.ph...

Agent Zero 代码问题漏洞

Agent Zero is an artificial intelligence framework developed by Jan Tomášek himself. Version 0.9.7 of Agent Zero contains a code vulnerability caused by incorrect handling of parameters in the file python/helpers/documentquery.py. This vulnerability could lead to server-side request forgery...

Tiandy Easy7 Integrated Management Platform SQL注入漏洞

Tiandy Easy7 Integrated Management Platform is a comprehensive video surveillance management platform developed by Tiandy Company in China. The version 7.17.0 of Tiandy Easy7 Integrated Management Platform contains a SQL injection vulnerability. This vulnerability arises from incorrect handling o...

ZKTeco ZKBioSecurity 跨站脚本漏洞

ZKTeco ZKBioSecurity is a web-based integrated platform developed by ZKTeco Corporation in China. Version 3.0 of ZKTeco ZKBioSecurity contains a cross-site scripting vulnerability. This vulnerability arises from improper handling of multiple parameters, which may allow attackers to inject malicio...