D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the webPage parameters of the goform/formWlanGuestSetup module...

PT-2026-24410

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered via the webPage parameter when accessing the '/goform/formWlanSetup' endpoint. Recommendations Update to a...

CVE-2025-70244: Stack-based Buffer Overflow

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup...

CVE-2025-70251: Stack-based Buffer Overflow

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanGuestSetup...

CVE-2025-70244

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup...

PT-2026-24400

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. This issue is triggered through the webPage parameter within the ''/goform/formWlanGuestSetup'' endpoint. Recommendations Update t...

CVE-2025-70242: Stack-based Buffer Overflow

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formSetWanPPTP...

CVE-2025-70250

creationtimestamp| type| source ---|---|--- 2026-03-09 15:04:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116199828734317627...

CVE-2025-70038

A security vulnerability was identified in linagora Twake v2023.Q1.1223 involving CWE-79: Improper Neutralization of Input During Web Page Generation . This flaw allows attackers to execute arbitrary code and is specifically identified as a Cross-Site Scripting (XSS) issue. No information regardi...

CVE-2026-27758

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged requests. Attackers can craft malicious requests that execute unauthorized...

PT-2026-21323

Name of the Vulnerable Software and Affected Versions GetSimple CMS affected versions not specified Description GetSimple CMS does not implement CSRF protection on the administrative file upload endpoint. An attacker can craft a malicious web page that silently triggers a file upload request from...

The vulnerability of the Google Chrome browser’s CSS component, which allows a hacker to trigger a service failure

The vulnerability of the Google Chrome browser’s CSS component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

CVE-2026-0102

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata...

CVE-2026-0102

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata...

CVE-2026-0102

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata...

The vulnerability of the File input component in Google Chrome allows a hacker to replace the user interface.

The vulnerability of the File input component in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface with a specially created HTML page...

GitLab 18.6 < 18.6.3 / 18.7 < 18.7.1 (CVE-2025-13761)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an unauthenticated user to execute arbitrary code in the...

PT-2026-31523

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw in the Permissions user interface in Google Chrome on Windows allows a remote attacker to perform domain spoofing using a specially crafted HTML page. The security severity is...

CVE-2026-2318

Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...