CVE-2026-30828

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.6.2, the url parameter can be used to retrieve local system files. This issue has been patched in version 4.6.2...

NEXTU NEXT-7004N Cross-site Scripting Vulnerability

The NEXTU NEXT-7004N is a wireless router from NEXTU. A cross-site scripting vulnerability exists in the NEXTU NEXT-7004N version 3.0.1, which stems from the fact that incorrect manipulation of the parameter url can lead to cross-site scripting...