CWE-1287: Improper Validation of Specified Type of Input

https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6

https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5

https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31c

https://github.com/laravel/framework/releases/tag/v12.68.0

https://github.com/laravel/framework/releases/tag/v13.29.0

Laravel TokenGuard authentication bypass through non-string API credentials

CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

https://github.com/laravel/framework/security/advisories/GHSA-5wcm-3v2w-8362

https://github.com/laravel/framework/pull/61322

https://github.com/laravel/framework/pull/61323

https://github.com/laravel/framework/commit/50a7970efe9f9990b6ec4f1e949de2abaaf4263e

https://github.com/laravel/framework/commit/b89f2944995d555bfda76dced1ef6c6b04ef17d8

https://github.com/laravel/framework/releases/tag/v13.27.0

Laravel relationship inclusion can trigger unauthorized data destruction

VDB-424742 | TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

VDB-424742 | CTI Indicators (IOB, IOC, IOA)

CVE-2026-114383 | CVE Analysis and Report

Submit #1019883 | TOTOLINK EX200 V5.2.3c.7200 Stack-based Buffer Overflow

TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

Robots::Validate::validate

Robots::Validate::bad_robot

CWE-488 Exposure of Data Element to Wrong Session

Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request

VDB-424741 | TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

VDB-424741 | CTI Indicators (IOB, IOC, IOA)

CVE-2026-114382 | CVE Analysis and Report

Submit #1019881 | TOTOLINK EX200 V5.2.3c.7200 Stack-based Buffer Overflow

TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.

Oracle Advisory

Net::LibSSH::connect

CWE-322 Key Exchange without Entity Authentication

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts

Rex::Commands::Rsync::sync

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no

CWE-226: Sensitive Information in Resource Not Removed Before Reuse

https://github.com/python-pillow/Pillow/security/advisories/GHSA-654x-cwwv-5j9c

https://github.com/python-pillow/Pillow/pull/10172

https://github.com/python-pillow/Pillow/commit/19f64946eb247b973dd4560be7dea3bf979d2e6a

https://github.com/python-pillow/Pillow/releases/tag/13.0.0

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

VDB-424739 | itsourcecode Online Cake Ordering System orderdetail.php sql injection

VDB-424739 | CTI Indicators (IOB, IOC, TTP, IOA)

CVE-2026-114381 | CVE Analysis and Report

Submit #1019792 | itsourcecode Online Cake Ordering System V1.0 SQL Injection

itsourcecode Online Cake Ordering System orderdetail.php sql injection

Search

Recent