EUVD-2026-94735

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

Linksys E1700 Router QoSSetup Code Execution

The vulnerability of the QoSSetup function in the /goform/QoSSetup microprogramming software for Linksys E1700 routers is related to the operation of writing data outside of the buffer in memory when processing the ackpolicy parameter. Exploiting this vulnerability allows a remote attacker to...

Linksys E1700 security vulnerabilities

The Linksys E1700 is a wireless router from Linksys, USA. A security vulnerability exists in Linksys E1700 version 1.0.0.4.003, which stems from a stack buffer overflow due to incorrect manipulation of the parameter ackpolicy in the file /goform/QoSSetup...

MAL-2025-7746 Malicious code in @digital-wealth-web/cwp-service-setu (npm)

The package @digital-wealth-web/cwp-service-setu was found to contain malicious code...

MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

Malicious code in @digital-wealth-web/cwp-service-setup (npm)

The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...

Design/Logic Flaw

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...