41878 matches found
CVE-2026-4906
CVE-2026-4906 affects Tenda AC5 firmware 15.03.06.47. The vulnerability resides in the decodePwd function of the /goform/WizardHandle POST Request Handler. By manipulating the WANT/WANS argument, an attacker can trigger a stack-based buffer overflow, with remote execution potential. Public disclo...
CVE-2026-4900
creationtimestamp| type| source ---|---|--- 2026-03-27 00:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyvdwegbm25...
EUVD-2026-16470
A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...
EUVD-2026-16476
A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. Remote exploitation of the attack is possible...
CVE-2026-4346
creationtimestamp| type| source ---|---|--- 2026-03-27 00:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhytllyj3n2d...
CVE-2026-4905
creationtimestamp| type| source ---|---|--- 2026-03-27 00:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyt4tzt522i 2026-03-27 01:18:53+00:00| seen| Telegram/67MCm8uvWkL1PFFVLqu-Ae9nhYuAfQmsKMFjCSOu4hiA4mc 2026-03-27 01:18:59+00:00| seen|...
PT-2026-28700
Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description A flaw exists in the Tenda AC15 router that allows remote attackers to trigger a stack-based buffer overflow. The issue is located within the POST Request Handler component, specifically in the...
PT-2026-28686
Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A stack-based buffer overflow exists in the fromWizardHandle function of the /goform/WizardHandle file within the POST Request Handler component. Manipulation of the WANT/WANS argument can trigger this...
BuildKit 后置链接漏洞
BuildKit is a concurrent, cache-efficient build tool package developed by Moby. Versions of BuildKit prior to 0.28.1 contained a post-link vulnerability. This vulnerability stemmed from insufficient validation of Git URL fragment sub-directory components, which could allow access to files outside...
PT-2026-28741
Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0 Description Langflow contains a path traversal flaw where the 'POST /api/v2/files' endpoint fails to sanitize the filename parameter within multipart form data. This allows an attacker to use path traversal...
CVE-2026-33945
creationtimestamp| type| source ---|---|--- 2026-03-26 23:59:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysrbvxdo2i 2026-03-27 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298196062602424 2026-03-27 00:00:44+00:00| seen|...
CVE-2026-2511
creationtimestamp| type| source ---|---|--- 2026-03-26 23:21:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyqluhi7z2h 2026-03-26 23:21:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyqmqtmrj2h...
CVE-2026-33664
creationtimestamp| type| source ---|---|--- 2026-03-26 23:20:03+00:00| seen| Telegram/8zEAgaRSdVOPVh8YiiaVjapuYDuCzradOizJ-8M58UocKc 2026-03-31 05:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3midffuq3aw2v...
CVE-2026-4902
A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...
CVE-2026-33640
creationtimestamp| type| source ---|---|--- 2026-03-26 23:16:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyqdbay5k2g 2026-03-26 23:19:48+00:00| seen| Telegram/lYHJ2uqEkk9SWNnUth8Z9R1ezNKbfqND5wGUosjkyCOBSr0...
CVE-2026-4905
A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsOOB of the component POST Request Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. Remote exploitation of the attack is possible...
CVE-2026-4904 Tenda AC5 POST Request setcfm formSetCfm stack-based overflow
A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/setcfm of the component POST Request Handler. Such manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit...
CVE-2026-4903
CVE-2026-4903 affects the Tenda AC5 (firmware 15.03.06.47). The vulnerability is in the POST /goform/QuickIndex handler function formQuickIndex, where manipulating the PPPOEPassword argument triggers a stack-based buffer overflow. The attack can be mounted remotely, with the exploit published and...
CVE-2026-4903 Tenda AC5 POST Request QuickIndex formQuickIndex memory corruption
A flaw has been found in Tenda AC5 15.03.06.47. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. This manipulation of the argument PPPOEPassword causes stack-based buffer overflow. The attack may be initiated remotely. Th...
CVE-2026-4902 Tenda AC5 POST Request addressNat fromAddressNat memory corruption
A vulnerability was detected in Tenda AC5 15.03.06.47. This affects the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is n...