4.8

CVSS4.0

CVE-2026-3385 - wren-lang wren wren_compiler.c resolveLocal recursion

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wren_compiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the pr…

πŸ“… Published: March 1, 2026, 8:32 a.m. πŸ”„ Last Modified: March 1, 2026, 8:32 a.m.

4.8

CVSS4.0

CVE-2026-3384 - ChaiScript chaiscript_eval.hpp Function_Push_Pop recursion

A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_Node_Impl::eval/chaiscript::eval::Function_Push_Pop of the file include/chaiscript/language/chaiscript_eval.hpp. The manipulation leads to uncontrolled recursion. An attack has to b…

πŸ“… Published: March 1, 2026, 8:02 a.m. πŸ”„ Last Modified: March 1, 2026, 8:02 a.m.

4.8

CVSS4.0

CVE-2026-3383 - ChaiScript boxed_number.hpp go divide by zero

A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the file include/chaiscript/dispatchkit/boxed_number.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to…

πŸ“… Published: March 1, 2026, 6:32 a.m. πŸ”„ Last Modified: March 1, 2026, 6:32 a.m.

4.8

CVSS4.0

CVE-2026-3382 - ChaiScript boxed_number.hpp get_as memory corruption

A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Number::get_as of the file include/chaiscript/dispatchkit/boxed_number.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit…

πŸ“… Published: March 1, 2026, 5:32 a.m. πŸ”„ Last Modified: March 1, 2026, 5:32 a.m.

8.7

CVSS4.0

CVE-2026-3380 - Tenda F453 L7Im frmL7ImForm buffer overflow

A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

πŸ“… Published: March 1, 2026, 3:02 a.m. πŸ”„ Last Modified: March 1, 2026, 3:02 a.m.

8.7

CVSS4.0

CVE-2026-3379 - Tenda F453 SetIpBind fromSetIpBind buffer overflow

A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be us…

πŸ“… Published: March 1, 2026, 2:32 a.m. πŸ”„ Last Modified: March 1, 2026, 2:32 a.m.

8.7

CVSS4.0

CVE-2026-3378 - Tenda F453 qossetting fromqossetting buffer overflow

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

πŸ“… Published: March 1, 2026, 2:02 a.m. πŸ”„ Last Modified: March 1, 2026, 2:02 a.m.

8.7

CVSS4.0

CVE-2026-3377 - Tenda F453 SafeUrlFilter fromSafeUrlFilter buffer overflow

A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

πŸ“… Published: Feb. 28, 2026, 11:32 p.m. πŸ”„ Last Modified: Feb. 28, 2026, 11:32 p.m.

8.7

CVSS4.0

CVE-2026-3376 - Tenda F453 SafeMacFilter fromSafeMacFilter buffer overflow

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform/SafeMacFilter. Such manipulation of the argument page leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been d…

πŸ“… Published: Feb. 28, 2026, 11:02 p.m. πŸ”„ Last Modified: Feb. 28, 2026, 11:02 p.m.

8.8

CVSS4.0

CVE-2026-28562 - wpForo 2.4.14 SQL Injection via Topics ORDER BY Parameter

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credenti…

πŸ“… Published: Feb. 28, 2026, 9:47 p.m. πŸ”„ Last Modified: Feb. 28, 2026, 9:47 p.m.
Total resulsts: 335207
Page 2 of 33,521
Β« previous page Β» next page
Filters