112641 matches found
CVE-2026-7056
A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be...
CVE-2026-7056
Affected product: Tenda F456 (firmware 1.0.0.5). Vulnerable component: httpd, function fromSafeUrlFilter in /goform/SafeUrlFilter. Issue: manipulation of the argument page leads to a buffer overflow. Exploitability: remote, with public exploit available. Impact: high-severity across confidentiali...
CVE-2026-7056 Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow
A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be...
CVE-2026-7101
creationtimestamp| type| source ---|---|--- 2026-04-26 09:43:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116470357386241515 2026-04-26 11:01:05+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116470662134946577 2026-05-28 16:07:09+00:00| seen|...
CVE-2026-5721
creationtimestamp| type| source ---|---|--- 2026-04-26 05:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mketeuripb2c 2026-07-13 12:15:14+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqjo7gvp7w2k 2026-07-13 14:45:22+00:00| seen|...
CVE-2026-7021 SmythOS sre Connector Service utils.ts information disclosure
A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...
CVE-2024-32692
creationtimestamp| type| source ---|---|--- 2026-04-26 03:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkemnygc5s2x...
GHSA-C4QG-J8JG-42Q5
creationtimestamp| type| source ---|---|--- 2026-04-26 03:29:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkemho5wntb2 2026-04-26 07:57:04+00:00| seen|...
CVE-2026-7002
creationtimestamp| type| source ---|---|--- 2026-04-26 02:04:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkehpzisv627...
PT-2026-35202
A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...
Tenda F456 缓冲区错误漏洞
The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of the page parameter in the fromSafeUrlFilter function of the goform/SafeUrlFilter module in the...
CVE-2026-4125
creationtimestamp| type| source ---|---|--- 2026-04-25 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mke3vkobu22i...
CVE-2025-49867
creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukeft52x...
CVE-2025-31918
creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:12+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukbvpi2g...
Server-side Request Forgery (SSRF)
Overview pagekit/pagekit is a modular and lightweight CMS built with Symfony components and Vue.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the url argument in the /index.php/admin/system/update/download process. An attacker can access internal...
CVE-2026-6983
A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit i...
EUVD-2026-25659
A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit i...
GHSA-6FW5-F8R9-FGFM
creationtimestamp| type| source ---|---|--- 2026-04-25 11:36:33+00:00| seen| https://gist.github.com/dims/bd766118ae32d646ea9f127ac51c3054...
CVE-2026-41163
creationtimestamp| type| source ---|---|--- 2026-04-25 11:17:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkcw5o2cdu2s 2026-05-09 05:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfisnqiqh2e...
CVE-2026-31682
creationtimestamp| type| source ---|---|--- 2026-04-25 10:06:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464783504751353 2026-04-25 20:30:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467237575005440 2026-05-05 20:00:00+00:00| seen|...