Threat database

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php?section=admin1. Performing a manipulation of the argument image results in unrestricted upload. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality of the file login.php. Such manipulation of the argument user/pass leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-78170 is a high-severity buffer overflow vulnerability in UTT HiPER 1200GW version 2.5.3-170306. The flaw exists in the strcpy function within the /goform/formConfigFastDirectionW file, where manipulation of the ssid argument can cause a buffer overflow. This vulnerability can be exploited remotely without user interaction. Exploit code has been published, but there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance is currently available.

CVE-2026-78169 is a critical stack-based buffer overflow vulnerability in UTT HiPER 1250GW version 3.2.7-210907-180535. It occurs in the strcpy function within the /goform/aspRemoteApConfTempSend HTTP Request Handler component. The vulnerability can be triggered remotely by manipulating the Profile argument. Public exploit code is available, increasing the risk of exploitation.

CVE-2026-76004 is a critical stack-based buffer overflow vulnerability in UTT HiPER 1250GW version 3.2.7-210907-180535. The flaw exists in the strcpy function within the /goform/aspApBasicConfigUrcp HTTP handler component. An attacker can remotely exploit this vulnerability by manipulating the 'pvid' argument, potentially leading to arbitrary code execution. The vulnerability has a high CVSS 4.0 score of 9.4, indicating severe impact. Public exploit code has been disclosed, but no known exploits are reported in the wild. No patch or remediation information is currently provided.

CVE-2026-76003 is a critical stack-based buffer overflow vulnerability in UTT HiPER 1200GW version 2.5.3-170306. The flaw exists in the strcpy function within the /goform/formGroupConfig file and can be triggered remotely by manipulating the timestart argument. Public exploit code is available, increasing the risk of attacks.

Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions.

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-18898 is a high-severity stack-based buffer overflow vulnerability in UTT HiPER 1200GW version 2.5.3-170306. The flaw exists in the strcpy function within the /goform/ConfigAdvideo file, triggered by manipulation of the timestart argument. This vulnerability can be exploited remotely without user interaction or privileges. Public exploit code is available, but no vendor response or patch has been provided.

CVE-2026-18897 is a high-severity stack-based buffer overflow vulnerability in the UTT HiPER 1250GW device, specifically in the strcpy function within /goform/getOneApConfTempEntry. The vulnerability is triggered by manipulating the tempName argument and can be exploited remotely without user interaction. The affected version is exactly 3.2.7-210907-180535. Although an exploit is publicly available, there is no vendor response or official patch at this time.

CVE-2026-18895 is a stack-based buffer overflow vulnerability in the UTT HiPER 1250GW device, specifically in the strcpy function within the /goform/APSecurity_5g file. The vulnerability can be triggered remotely by manipulating the cipher argument. The affected version is 3.2.7-210907-180535. Exploit code has been publicly released, but the vendor has not responded or provided a fix.

A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

A buffer overflow vulnerability exists in UTT HiPER 2610G firmware up to version 3.0.0-171107. The flaw is in the strcpy function within /goform/formConfigDnsFilterGlobal, where manipulation of the GroupName argument can cause overflow. This vulnerability is remotely exploitable without user interaction and has a high severity score of 8.7. No official patch or remediation guidance is currently provided by the vendor. Exploit details have been publicly disclosed, but no known exploits in the wild are reported.

A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBinds results in buffer overflow. The exploit has been made public and could be used.

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/formFireWall. This manipulation of the argument Profile causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

A vulnerability was detected in UTT HiPER 1200GW up to 2.5.3-170306. This affects the function strcpy of the file /goform/formTaskEdit. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

CVE-2026-9632 is a high-severity stack-based buffer overflow vulnerability in the UTT HiPER 1250GW device's Web Management Interface. The flaw exists in the strcpy function within the /goform/formGroupConfig component, where manipulation of the Profile argument can trigger the overflow. This vulnerability can be exploited remotely without user interaction or privileges. An exploit has been published, increasing the risk of potential attacks. No official patch or remediation guidance is currently available from the vendor. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk.

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of the component Web Management Interface. Performing a manipulation of the argument Profile results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used.