6.9

CVSS4.0

CVE-2026-7062 - Intina47 context-sync Git Integration git-integration.ts os command injection

A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unknown part of the file src/git-integration.ts of the component Git Integration. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed pubโ€ฆ

๐Ÿ“… Published: April 26, 2026, 10:15 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 10:15 p.m.

6.9

CVSS4.0

CVE-2026-7061 - Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection

A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue is some unknown functionality of the file src/services/docker.service.ts of the component MCP/HTTP. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exโ€ฆ

๐Ÿ“… Published: April 26, 2026, 10 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 10 p.m.

6.9

CVSS4.0

CVE-2026-7060 - liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a manipulatiโ€ฆ

๐Ÿ“… Published: April 26, 2026, 8:15 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 8:15 p.m.

6.9

CVSS4.0

CVE-2026-7059 - 666ghj MiroFish Query Parameter simulation.py get_simulation_posts path traversal

A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function get_simulation_posts of the file backend/app/api/simulation.py of the component Query Parameter Handler. Performing a manipulation of the argument Platform results in path traversal. The attack can be initiated remoโ€ฆ

๐Ÿ“… Published: April 26, 2026, 8 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 8 p.m.

6.9

CVSS4.0

CVE-2026-7058 - 666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command commโ€ฆ

A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The impacted element is the function SimulationIPCClient.send_command of the file backend/app/services/simulation_ipc.py of the component Inter-Process Communication. Such manipulation leads to command injection. It is possible to launcโ€ฆ

๐Ÿ“… Published: April 26, 2026, 7:45 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 7:45 p.m.

8.7

CVSS4.0

CVE-2026-7057 - Tenda F456 httpd setcfm buffer overflow

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published andโ€ฆ

๐Ÿ“… Published: April 26, 2026, 6:45 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 6:45 p.m.

8.7

CVSS4.0

CVE-2026-7056 - Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow

A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be usโ€ฆ

๐Ÿ“… Published: April 26, 2026, 6:30 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 6:30 p.m.

8.7

CVSS4.0

CVE-2026-7055 - Tenda F456 httpd VirtualSer fromVirtualSer buffer overflow

A security vulnerability has been detected in Tenda F456 1.0.0.5. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component httpd. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The eโ€ฆ

๐Ÿ“… Published: April 26, 2026, 6 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 6 p.m.

8.7

CVSS4.0

CVE-2026-7054 - Tenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow

A weakness has been identified in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a manipulation of the argument opttype/usernamewith can lead to buffer overflow. The attack can be executed remotely. The eโ€ฆ

๐Ÿ“… Published: April 26, 2026, 4:45 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 4:45 p.m.

8.7

CVSS4.0

CVE-2026-7053 - Tenda F456 httpd L7Prot frmL7ProtForm buffer overflow

A security flaw has been discovered in Tenda F456 1.0.0.5. This affects the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the argument page results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been releasโ€ฆ

๐Ÿ“… Published: April 26, 2026, 4 p.m. ๐Ÿ”„ Last Modified: April 26, 2026, 4 p.m.
Total resulsts: 346636
Page 2 of 34,664
ยซ previous page ยป next page
Filters