CVE-2026-19845

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the...

CVE-2026-19844

TOTOLINK A800RR 4.1.2cu.5137_B20200730 is affected by a stack-based buffer overflow in the IPv6 component ipv6.so, specifically in function setRadvdCfg of /cgi-bin/cstecgi.cgi. Manipulating the argument radvdinterfacename triggers the overflow. The vulnerability can be exploited remotely, and pub...

MINI-CHCJ-VV63-6FCQ

Bulletin has no description...

MINI-GMX2-C4VW-66HM

Bulletin has no description...

CVE-2026-73566

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could provide a specially crafted tar archive with a long-path header. When processing this archive with a non-empty member-selection list, an uncontrolled recursion in the filesFilter function can lea...

MINI-8P2G-7MP2-5XW2

Bulletin has no description...

MINI-WXPC-FGG4-JCRG

Bulletin has no description...

MINI-FQXJ-MVV3-59Q4

Bulletin has no description...

MINI-FXCM-3XP4-22RF

Bulletin has no description...

MINI-HXQ2-QX55-VGR3

Bulletin has no description...

MINI-M334-RH4H-HGVH

Bulletin has no description...

CVE-2026-19823 Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the...

GO-2025-3837 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2024-2703 vulnerabilities

Vulnerabilities for packages: kots...

GO-2022-0197 vulnerabilities

Vulnerabilities for packages: hey...

GO-2026-5538 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2026-19813

CVE-2026-19813 affects TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) in the firewall.so component, specifically the setMacFilterRules function in /cgi-bin/cstecgi.cgi. The issue is a stack-based buffer overflow caused by manipulation of the Comment argument, allowing a remote attacker to explo...

CVE-2026-19812

CVE-2026-19812 affects TOTOLINK A800R (version 4.1.2cu.5137_B20200730) in the file path product.so, function UploadCustomModule. The issue is a stack-based buffer overflow caused by manipulation of the argument File in /cgi-bin/cstecgi.cgi. This vulnerability enables remote exploitation (network ...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19789 Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow

A vulnerability was determined in Tenda AC1206 15.03.06.23multiTD01. This vulnerability affects the function setwlguestiplist of the file /goform/WifiGuestSet of the component httpd web management interface. This manipulation of the argument shareSpeed causes stack-based buffer overflow. Remote...