CVE-2025-50670: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglbwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters...

PT-2026-31396

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 series appliances affected versions not specified Description Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication...

CVE-2026-27140: Incorrect Authorization

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

PT-2026-36063

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Description A crash occurs in the RTSP Real Time Streaming Protocol protocol dissector, which is the component responsible for analyzing and displaying RTSP network traffic. Recommendations Update Wiresha...

D-Link DI-8003 security vulnerability

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the timegroup.asp script, which can be exploited by an attacker to cause a denial of service...

WordPress plugin WCAPF has a SQL injection vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-31282

Name of the Vulnerable Software and Affected Versions Hono versions prior to 4.12.12 Description A path traversal issue in the toSSG function allows files to be written outside the configured output directory during static site generation. When using dynamic route parameters via ssgParams,...

PT-2026-31325

Name of the Vulnerable Software and Affected Versions rfc3161-client versions prior to 1.0.6 Description An authorization bypass issue exists in rfc3161-client's signature verification. An attacker can impersonate a trusted TimeStamping Authority TSA by exploiting a flaw in how the library extrac...

CVE-2025-50670

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglbwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters...

PT-2026-31395

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 series appliances affected versions not specified Description A remote attacker can enumerate SSL VPN user credentials due to an observable response discrepancy. Recommendations At the moment, there is no information about a...

PT-2026-31378

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the name and mem parameters in the '/time group.asp' API endpoint. Recommendations Update to a newer version that addresses this issue. As a...

CVE-2025-50653

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /timegroup.asp endpoint...

PT-2026-31289

Name of the Vulnerable Software and Affected Versions WP Visitor Statistics Real Time Traffic versions up to and including 8.4 Description The WP Visitor Statistics Real Time Traffic plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'wsm showDayStatsGraph' shortcode...

CVE-2025-50665: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /webkeyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request via the name, en, time, memgb2312, and memutf8 parameters...

VulGD: A LLM-Powered Dynamic Open-Access Vulnerability Graph Database

Software vulnerabilities continue to pose significant threats to modern information systems, requiring a timely and accurate risk assessment. Public repositories, such as the National Vulnerability Database and CVE details, are regularly updated, but predominantly utilize relational data models...

PT-2026-31388

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of input parameters. An attacker can exploit this by sending a crafted HTTP GET request to the /web keyword.asp endpoint using the name, en, time,...

CVE-2026-4303: Improper Neutralization of Input During Web Page Generation

The WP Visitor Statistics Real Time Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wsmshowDayStatsGraph' shortcode in all versions up to, and including, 8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2025-50653

CVE-2025-50653 affects D-Link DI-8003 devices (firmware 16.07.26A1). A buffer overflow is triggered by improper handling of the name and mem parameters in the /time_group.asp endpoint. CNVD-2026-17635 and RH/CVEs describe a boundary/overflow condition leading to denial of service; NVD metrics ind...

CVE-2025-50671

A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (firmware version 16.07.26A1 ) due to incorrect bounds checking of parameters in the /xwgl_ref.asp endpoint. A remote attacker can exploit this by sending a crafted HTTP GET request containing excessively lon...

SentinelSphere: Integrating AI-Powered Real-Time Threat Detection with Cybersecurity Awareness Training

The field of cybersecurity is confronted with two interrelated challenges: a worldwide deficit of qualified practitioners and ongoing human-factor weaknesses that account for the bulk of security incidents. To tackle these issues, we present SentinelSphere, a platform driven by artificial...