Lucene search
+L

153 matches found

Packet Storm News
Packet Storm News
•added 2026/07/30 12:00 a.m.•17 views

Statistically Secure Uncloneable Encryption of Arbitrary Messages

Unconditional uncloneable encryption of a single bit with efficient encryption and decryption is now possible. However, whether the extension to messages of arbitrary length achieves statistical security remains to be known. Using the fact that the encoding bases for the single-bit scheme known t...

5.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/07/28 12:52 p.m.•28 views

kernel: xfrm: Duplicate SPI Handling

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

7.8CVSS6.5AI score0.00161EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/29 8:44 a.m.•35 views

BIT-JOOMLA-2026-48901 Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

7.5CVSS5.9AI score0.00416EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/28 2:15 p.m.•22 views

CVE-2026-48901

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/26 5:16 p.m.•24 views

CVE-2026-48901

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

7.5CVSS0.00416EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/26 5:16 p.m.•23 views

CVE-2026-48901

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

7.5CVSS5.9AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/26 4:42 p.m.•11 views

CVE-2026-48901

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

5.8AI score0.00416EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/05/26 4:42 p.m.•24 views

EUVD-2026-31871

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

5.8AI score0.00416EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/26 4:42 p.m.•14 views

CVE-2026-48901 Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects

The InputFilter::getInstance method omitted a security sensitive parameter from the instance cache key...

5.9AI score0.00416EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•25 views

PT-2026-43319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The getInstance function within the InputFilter class fails to include a security-sensitive parameter when generating the instance cache key. Recommendations At...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/05/19 9:04 a.m.•25 views

kernel: xfrm: Duplicate SPI Handling

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

7.8CVSS6.5AI score0.00161EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/02/26 12:00 a.m.•23 views

Warehouse Inventory Management System 授权问题漏洞

Warehouse Inventory Management System is a warehouse inventory management system developed by go2ismail. The Warehouse Inventory Management System versions 9.20250118 and earlier have an authorization issue vulnerability. This vulnerability arises from improper authorization due to operations on...

8.8CVSS6.6AI score0.00529EPSS
SaveExploits1References4
OSV
OSV
•added 2026/01/21 5:16 p.m.•15 views

CVE-2025-70646

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub72290 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS5.9AI score0.00362EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/21 5:16 p.m.•17 views

CVE-2025-70646

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub72290 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS0.00362EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/21 12:00 a.m.•42 views

CVE-2025-70646

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub72290 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

0.00362EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•17 views

PT-2026-3783

Name of the Vulnerable Software and Affected Versions Tenda AX1803 version 1.0.0.1 Description The Tenda AX1803 version 1.0.0.1 contains a stack overflow in the security parameter of the sub 72290 function. A crafted request can trigger a Denial of Service DoS. Recommendations At the moment, ther...

7.5CVSS6AI score0.00362EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•25 views

Tenda AX1803 security vulnerabilities

The Tenda AX1803 is a dual-band Gigabit WIFI6 router produced by the Chinese company Tenda. The Tenda AX1803 v1.0.0.1 version contains a security vulnerability. This vulnerability stems from a stack overflow in the security parameter of the sub72290 function, which may lead to a denial-of-service...

7.5CVSS5.9AI score0.00362EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/21 12:00 a.m.•40 views

CVE-2025-70646

The Tenda AX1803 router, specifically version v1.0.0.1 , contains a stack-based buffer overflow vulnerability within the security parameter of the sub_72290 function. An attacker can exploit this flaw by sending a crafted request to trigger a Denial of Service (DoS) , resulting in a service failu...

7.5CVSS5.6AI score0.00362EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/17 12:23 a.m.•25 views

CVE-2025-71020

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub4C408 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.6AI score0.00362EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•0 views

CVE-2025-71020: Stack-based Buffer Overflow

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub4C408 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.9AI score0.00362EPSS
SaveExploits1References1
Rows per page
Query Builder