News & Sicurezza

A vulnerability was determined in Tenda W3 1.0.0.3(2204). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component POST Parameter Handler. This manipulation of the argument ping1/ping2 causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in Tenda W3 1.0.0.3(2204). Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of the argument funcpara1 results in stack-based buffer overflow. The attack can only be performed from the local network. The exploit has been made public and could be used.

CVE ID :CVE-2026-3972 Published : March 12, 2026, 2:15 a.m. | 4 hours, 9 minutes ago Description :A vulnerability was found in Tenda W3 1.0.0.3(2204). Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of the argument funcpara1 results in stack-based buffer overflow. The attack can only be performed from the local network. The exploit has been made public and could be used. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3973 Published : March 12, 2026, 2:15 a.m. | 4 hours, 9 minutes ago Description :A vulnerability was determined in Tenda W3 1.0.0.3(2204). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component POST Parameter Handler. This manipulation of the argument ping1/ping2 causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws Cisco has issued a high-priority security advisory regarding multiple vulnerabilities in its IOS XR Software that could allow local attackers to bypass security restrictions and seize full administrat ... Read more Published Date: Mar 12, 2026 (23 hours, 4 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-20046 CVE-2026-20040 CVE-2025-68613

Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered Google has officially promoted Chrome 146 to the stable channel for Windows, Mac, and Linux, kicking off a global rollout that will reach users over the coming days and weeks. While the update brings ... Read more Published Date: Mar 12, 2026 (23 hours, 33 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-3924 CVE-2026-3917 CVE-2026-3916 CVE-2026-3915 CVE-2026-3914 CVE-2026-3913 CVE-2026-2441 CVE-2025-68613

CVE ID :CVE-2025-59388 Published : March 12, 2026, 2:15 a.m. | 2 hours, 9 minutes ago Description :A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: Hyper Data Protector 2.3.1.455 and later Severity: 6.6 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Code Red: GitLab’s Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities GitLab has released critical security updates—versions 18.9.2, 18.8.6, and 18.7.6—for both Community Edition (CE) and Enterprise Edition (EE). This emergency patch addresses several high-severity flaw ... Read more Published Date: Mar 12, 2026 (23 hours, 41 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1090 CVE-2026-1069 CVE-2025-14513 CVE-2025-13929 CVE-2025-68613

CVE ID :CVE-2026-1182 Published : March 12, 2026, 2:15 a.m. | 4 hours, 9 minutes ago Description :GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A vulnerability has been found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument index/GO leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

A flaw has been found in Tenda i3 1.0.0.6(2204). Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. Executing a manipulation of the argument index can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.

A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of the component Basic Organizational Structure Module. Performing a manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.