112570 matches found
PT-2026-35351
A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the component downloadApp Endpoint. This manipulation of the argument url causes path traversal. It is possible to initiate the...
Toonflow 路径遍历漏洞
Toonflow is an AI short story production platform developed by HBAI-Ltd. Versions of Toonflow prior to 1.1.1 contained a path traversal vulnerability. This vulnerability stemmed from improper handling of the parameter url in the z.url function within the downloadApp.ts file in the downloadApp...
CVE-2026-30346
An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL...
PT-2026-42894
Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn versions prior to 1.32 Description A stack-based buffer overflow can be executed remotely via the webs component. The issue exists in an unknown function within the '/goform/formWpsStart' endpoint when manipulating the...
RHEL 10 : yggdrasil-worker-package-manager (RHSA-2026:10701)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:10701 advisory. yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and...
RHEL 10 : rhc-worker-playbook (RHSA-2026:10929)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:10929 advisory. A worker for yggdrasil that receives Ansible playbooks and executes them against the local host. Security Fixes: crypto/x509: Incorrect...
CVE-2026-7065
A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.service.ts of the component Remote Upload API. The manipulation of the argument url leads to server-side request forgery...
CVE-2026-40858
creationtimestamp| type| source ---|---|--- 2026-04-26 19:17:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbgsswyh2m 2026-04-29 15:06:37+00:00| seen| https://t.me/bdufstecru/3121 2026-07-13 22:00:05+00:00| seen| https://t.me/GithubRedTeam/92798 2026-07-14 00:00:07+00:00|...
CVE-2026-7056
A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be...
CVE-2026-7056
Affected product: Tenda F456 (firmware 1.0.0.5). Vulnerable component: httpd, function fromSafeUrlFilter in /goform/SafeUrlFilter. Issue: manipulation of the argument page leads to a buffer overflow. Exploitability: remote, with public exploit available. Impact: high-severity across confidentiali...
CVE-2026-7056 Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow
A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be...
CVE-2026-7101
creationtimestamp| type| source ---|---|--- 2026-04-26 09:43:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116470357386241515 2026-04-26 11:01:05+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116470662134946577 2026-05-28 16:07:09+00:00| seen|...
CVE-2026-5721
creationtimestamp| type| source ---|---|--- 2026-04-26 05:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mketeuripb2c 2026-07-13 12:15:14+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqjo7gvp7w2k 2026-07-13 14:45:22+00:00| seen|...
CVE-2026-7021 SmythOS sre Connector Service utils.ts information disclosure
A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...
CVE-2024-32692
creationtimestamp| type| source ---|---|--- 2026-04-26 03:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkemnygc5s2x...
GHSA-C4QG-J8JG-42Q5
creationtimestamp| type| source ---|---|--- 2026-04-26 03:29:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkemho5wntb2 2026-04-26 07:57:04+00:00| seen|...
CVE-2026-7002
creationtimestamp| type| source ---|---|--- 2026-04-26 02:04:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkehpzisv627...
Tenda F456 缓冲区错误漏洞
The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of the page parameter in the fromSafeUrlFilter function of the goform/SafeUrlFilter module in the...
PT-2026-35202
A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of the component Connector Service. This manipulation of the argument baseURL causes information disclosure. It is possible to initiate the attack remotely. The...