security-portfolio

Skyler M. — Security Portfolio IT Infrastructure & Security Engineer · Offensive security · Detection engineering · Vendor risk USMC veteran · Sole IT & security owner for a 200-user firm across 23 states · Top 2% on TryHackMe LinkedIn · GitHub @Mitsu-bis · HackerOne · TryHackMe · Resume I'm a US...

CVE-2026-10537

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects :...

CVE-2026-10537

A misconfiguration in Control-M/Enterprise Manager and Control-M/Server allows unauthenticated remote users to access certain service functionality. This vulnerability could lead to information exposure or denial of service . Affected versions include Control-M/Enterprise Manager and Control-M/Se...

CVE-2021-33959

CVE-2021-33959 It can be seen that Plex service listens to the four udp ports 32410, 32412, 32413 and 32414. Through the analysis of the attack payload and using the message format of the device query request for reference, we write software to send udp packets with the attack payload of M-SEARCH...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting XSS vulnerability found in airMAX M devices to escalate privileges on the device...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116839

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices. A malicious actor can exploit this by luring an authenticated user to a malicious page, enabling the attacker to make unauthorized changes and execute a Denial of Service (DoS) attack on the device. No specific exploita...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

EUVD-2026-110579

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116838

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices . A malicious actor can lure an authenticated user to a malicious page to trigger the CSRF, which can then be used to execute Command Injection on the device. No specific remediation or exploit details are provided in th...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

EUVD-2026-110578

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device...

CVE-2026-116837

The airMAX M, LTU, SolarPoint, and SolarSwitch devices are vulnerable to a Heap-based Buffer Overflow (CWE-122). A malicious actor with access to the adjacent network can exploit this flaw to achieve arbitrary code execution on the affected hardware. No specific exploit details or remediation ste...

EUVD-2026-110576

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device...

CVE-2026-116836

A Stored Cross-Site Scripting (XSS) vulnerability exists in airMAX M devices . A malicious actor with access to the adjacent network could exploit this flaw under specific conditions to escalate privileges on the device. While the vulnerability's impact is significant, the documents do not provid...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting XSS vulnerability found in airMAX M devices to escalate privileges on the device...

EUVD-2026-110568

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting XSS vulnerability found in airMAX M devices to escalate privileges on the device...