CVE-2026-94139

A command injection vulnerability exists in the Cookie Handler component of the Chengdu Feiyuxing Technology Feiyu Star Router (version B-MB5E202-210322-r11656 ). Manipulation of the session_id argument in the file /send_order.cgi?parameter=loginout allows remote attackers to execute arbitrary co...

CVE-2026-94138

A command injection vulnerability exists in Chengdu Feiyuxing Technology Feiyu Star Router (version B-MB5E202-210322-r11656). The flaw resides in the /send_order.cgi script (parameter=del_expmac), where manipulation of the mac argument allows command execution. The attack can be launched remotely...

CVE-2026-94137

Hangzhou Shunwang Technology shzh version 10.7.2.693 contains a denial-of-service vulnerability in the driver file shdrv_x64.sys , specifically in the function sub_180004AC0 within the IRP_MJ_DEVICE_CONTROL handler. The root cause is improper handling of the PID argument, which allows a local att...

CVE-2026-94185

CVE-2026-94185 is a path traversal vulnerability in nvm (Node Version Manager) affecting versions before 0.40.8 . The function nvm_alias() concatenates a requested version or alias name onto $NVM_DIR/alias and reads the result with no containment check , so a name containing a .. component escape...

CVE-2026-94129

A write-what-where vulnerability exists in the IOCTL Handler (function sub_1105C) of the BS_RVSIO64.sys driver within BioStar VALKYRIE AURORA 2.10.2411.0800 . Manipulating the PhysicalAddress argument allows an attacker with local access to write arbitrary data to arbitrary memory, resulting in a...

CVE-2026-94128

BioStar VIVID LED DJ 4.0.2411.1500 contains a write-what-where vulnerability in the IOCTL Handler (function sub_1105C of BS_LED64.sys). Manipulation of the AssociatedIrp argument allows a local attacker with low privileges to corrupt memory, leading to high impact on confidentiality, integrity, a...

CVE-2026-94110

QCMS up to 6.0.6 is vulnerable to a remote SQL injection in the self_Tmp function of Lib/Config/Controllers.php (Content Detail Page component). The root cause is unsanitized use of the ID argument. A publicly disclosed proof-of-concept exploit is available. Notably, the router parses raw REQUEST...

CVE-2026-94103

RooCMS (up to versions 1.2.2 , 1.3.4 , and 1.4RC2 ) is affected by a code injection vulnerability in the eval function within roocms/site_pagePHP.php (Frontend Rendering component). Manipulation of the content argument allows an authenticated remote attacker to inject arbitrary code. The CVSS 3.1...

CVE-2026-94102

An open redirect vulnerability exists in WuzhiCMS up to 4.1.0 , specifically in the Login component at /index.php?m=member&v=Login. The root cause is that the forward argument is only sanitized by remove_xss(), an XSS keyword/entity scrubber, which is insufficient to prevent a crafted redirect UR...

CVE-2026-94101

A buffer overflow in the function vlan_load_form_uci of /usr/bin/routerd on the Netcore NBR200V2 router (firmware 1.3.241127.071246) can be triggered remotely by manipulating the wan_num argument. The vulnerability requires low privileges and no user interaction, with a scope change leading to hi...

CVE-2026-94100

A buffer overflow in the function wan_config_set_vlan within /usr/bin/routerd of the Netcore NBR200V2 (firmware 1.3.241127.071246) allows a remote attacker with low privileges to trigger a WAN VLAN Reconfiguration flaw by manipulating the vlan_wanX.ports argument. CVSS 3.1 scores the vulnerabilit...

CVE-2026-94099

A command injection vulnerability exists in Netcore NBR200V2 (version 1.3.241127.071246) within the Backup Restore component. Manipulating the QUERY_STRING argument of the restore.cgi file allows remote attackers to execute arbitrary commands. A proof-of-concept exploit has been released to the p...

CVE-2026-94098

A command injection vulnerability exists in the Netcore NBR200V2 router (firmware 1.3.241127.071246 ), specifically in the Firmware Upgrade CGI Endpoint at /www/cgi-bin/upgrade. An attacker can remotely exploit this by manipulating the QUERY_STRING argument, achieving high impact to confidentiali...

CVE-2026-36470

CuteNews v.2.1.2 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the index.php file. The root cause is that the application copies the value of the "Referer" header into the response HTML without any modification or escaping during POST messages to index.php. Exploitation detai...

CVE-2026-79079

A vulnerability exists in CrossWire Xiphos versions

CVE-2026-36471

The software CuteNews v.2.1.2 is vulnerable to an insecure deserialization flaw affecting the ** b_post_data** parameter within the cn_parse_url() function. A remote attacker can exploit this by submitting a crafted base64-encoded serialized PHP payload as a POST parameter. This allows for the in...

CVE-2026-88409

FalkorDB (a Redis module) versions v4.20.1 through v4.20.4 contains a buffer overflow in the _Decode_GrB_Matrix function located in /v19/decode_matrix.c. An attacker with low privileges can trigger a Denial of Service by sending a crafted input over the network. The assigned CVSS 3.1 score is 8.8...

CVE-2026-88756

Pagekit CMS versions

CVE-2026-36467

The CuteNews v.2.1.2 application is vulnerable to an Unrestricted Upload of File with Dangerous Type within the core/modules/media.php component. This flaw allows remote authenticated users with access to the Media Manager panel to execute arbitrary code in the context of the web application. Suc...

CVE-2026-88411

CVE-2026-88411 is an improper error handling vulnerability in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (a Redis module) v4.20.1 , leading to a Denial of Service within the application. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges...