Aggregator

Submit #767262 / VDB-349651

Submit #767227 / VDB-349712

A vulnerability has been found in Tenda F453 1.0.0.3 and classified as critical. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. This vulnerability is traded as CVE-2026-3732. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. This vulnerability appears as CVE-2026-3731. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

Submit #767226 / VDB-349711

Name: CryptoNite CTF 2026 (an CryptoNite CTF event.)
Date: March 6, 2026, 5:30 a.m. — 07 March 2026, 11:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://tachyon.iittp.ac.in/ctf/
Rating weight: 22.11
Event organizers: bl4ckc4ts

A vulnerability described as problematic has been identified in PHPJabbers Night Club Booking Software 1.0. This affects an unknown function of the component Forgot Password Handler. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-51321. The attack can be launched remotely. No exploit exists.

Submit #767222 / VDB-349710

Submit #767120 / VDB-349709

A vulnerability, which was classified as critical, has been found in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Performing a manipulation of the argument amen_id/rmtype_id results in sql injection. This vulnerability is reported as CVE-2026-3730. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability classified as critical was found in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-3729. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability classified as critical has been found in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpara1 causes stack-based buffer overflow. This vulnerability is registered as CVE-2026-3728. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability described as critical has been identified in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mit_linktype/PPPOEPassword results in stack-based buffer overflow. This vulnerability is cataloged as CVE-2026-3727. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability marked as critical has been reported in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is listed as CVE-2026-3726. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability labeled as critical has been found in 1024-lab/lab1024 SmartAdmin up to 3.29. Affected by this issue is the function freemarkerResolverContent of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/mail/MailService.java of the component FreeMarker Template Handler. Executing a manipulation of the argument template_content can lead to improper neutralization of special elements used in a template engine. This vulnerability is tracked as CVE-2026-3725. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #767010 / VDB-349708