EUVD-2026-82673

The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87775 Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell

The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87774 Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week

The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87774

The Tz Weekly Radio Schedule WordPress plugin (through 1.8.1 ) is vulnerable to unauthenticated SQL injection via the week parameter. A parameter is not sanitized or escaped before being used to build a SQL query in an AJAX action accessible without authentication, allowing attackers to extract s...

EUVD-2026-82672

The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

gr-qradiolink

gr-qradiolink 重要通知 ：此代码由AI生成。 此代码尚未经过专业程序员审查，它是一个大型项目。代码库中有可用的测试，请审查这些测试及其代码。 用于QRadioLink块的GNU Radio外部（OOT）模块。 分支main： GNU Radio 3.10 OOT（CMake findpackagegnuradio）。实验性的GNU Radio 4 移植版本位于分支gnuradio4（该分支上的READMEgr4.md）。 代码导航： docs/CODEMAP.md（文件、函数、块索引）。gr-ident ZMQ模式路由：...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting

WordPress Select All Categories and Taxonomies plugin before 1.3.2 contains a cross-site scripting vulnerability. The settings page of the plugin does not properly sanitize the tab parameter before outputting it back. An attacker can inject arbitrary script in the browser of an unsuspecting user ...

CVE-2026-25940

PoC de CVE-2026-25940 para jsPDF Una prueba de concepto para CVE-2026-25940 que demuestra cómo apariencias de botones de radio AcroForm especialmente diseñadas pueden desencadenar JavaScript incrustado en visores de PDF vulnerables p. ej., Foxit. El repositorio incluye un generador basado en Node...

gr-PHYSEC

gr-PHYSEC: Módulo GNU Radio para Seguridad de Capa Física Este módulo de GNU Radio proporciona capacidades de fingerprinting de canal para aplicaciones de seguridad de capa física utilizando modelos de aprendizaje profundo. Características Fingerprinting de Canal : Extrae características únicas d...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

CVE-2026-86885 is an input validation flaw in iOS 27 and iPadOS 27 that an attacker within radio range can exploit without privileges or user interaction to cause unexpected system termination (denial of service). The CVSS 3.1 score is 6.5 (MEDIUM) , with a vector of AV:A/AC:L/PR:N/UI:N/S:U/C:N/I...

EUVD-2026-77925

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: radio-shark: Added endpoint checks The syzbot fuzzer was able to trigger a WARNING message from the radio-shark2 driver: ------------ Cut here ------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 0 PID: 327...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ax25: Fixed the reference count leak issue of the netdevice object. There is a reference count leak issue with the object netdevice in ax25devdevicedown. When the ax25 device is being shut down, ax25devdevicedown reduces the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: NFC: NULLed the dev-rfkill to prevent UAF The commit 3e3b5dfcd16a “NFC: reordered the logic in nfcun,registerdevice” assumes that the deviceisregistered function in the nfcdevup function will help to check when the rfkill is...

hardware-compliance-handbook

Hardware Compliance Knowledge Base A fact-checked, open reference on the EU laws that govern hardware and IoT cybersecurity — CRA, RED, NIS2, and the Cybersecurity Act/EUCC, in one place instead of four. Prepared by Platanor Technologies platanor.com — an embedded security firm for IoT device...

cve-2016-5345

CVE-2016-5345 Escalada de privilegios en el controlador de radio FM de Qualcomm. Exploit probado en un dispositivo ASUS. Ya se requieren algunos privilegios para abrir el controlador de dispositivo vulnerable. CVE original descubierto por Aravind Machiry donfos del Shellphish Grill Team...