Aggregator

Name: CryptoNite CTF 2026 (an CryptoNite CTF event.)
Date: March 6, 2026, 5:30 a.m. — 07 March 2026, 11:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://tachyon.iittp.ac.in/ctf/
Rating weight: 22.11
Event organizers: bl4ckc4ts

A vulnerability described as problematic has been identified in PHPJabbers Night Club Booking Software 1.0. This affects an unknown function of the component Forgot Password Handler. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-51321. The attack can be launched remotely. No exploit exists.

Submit #767222 / VDB-349710

Submit #767120 / VDB-349709

A vulnerability, which was classified as critical, has been found in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Performing a manipulation of the argument amen_id/rmtype_id results in sql injection. This vulnerability is reported as CVE-2026-3730. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability classified as critical was found in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-3729. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability classified as critical has been found in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpara1 causes stack-based buffer overflow. This vulnerability is registered as CVE-2026-3728. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability described as critical has been identified in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mit_linktype/PPPOEPassword results in stack-based buffer overflow. This vulnerability is cataloged as CVE-2026-3727. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability marked as critical has been reported in Tenda F453 1.0.0.3. This affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is listed as CVE-2026-3726. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability labeled as critical has been found in 1024-lab/lab1024 SmartAdmin up to 3.29. Affected by this issue is the function freemarkerResolverContent of the file sa-base/src/main/java/net/lab1024/sa/base/module/support/mail/MailService.java of the component FreeMarker Template Handler. Executing a manipulation of the argument template_content can lead to improper neutralization of special elements used in a template engine. This vulnerability is tracked as CVE-2026-3725. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #767010 / VDB-349708

Submit #766934 / VDB-349707

Submit #766933 / VDB-349706

Submit #766932 / VDB-349705

Submit #766931 / VDB-349704

A vulnerability identified as problematic has been detected in Mendi Neurofeedback Headset V4. Affected by this vulnerability is an unknown functionality of the component Bluetooth Low Energy Handler. Performing a manipulation results in cleartext transmission of sensitive information. This vulnerability is identified as CVE-2026-2671. The attack can only be performed from the local network. There is not any exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #766927 / VDB-347999