CVE-2026-110875

AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...

PT-2026-116102

yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users to access other users' customer records by supplying arbitrary ids. Attackers can enumerate ids against the get, update, delete and do-open endpoints to read contact details,...

Linux Distros Unpatched Vulnerability : CVE-2026-110875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds...

UBUNTU-CVE-2026-110875

AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...

connectwise-automate-AiTM-rce

ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...

CVE-2024-39700-PoC

CVE-2024-39700 Proof of Concept Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Action Result:...

CLSA-2026-1792102343 TuxCare security update for 10 packages (1 CVE)

TuxCare rebuilt 10 packages to address 1 CVE. Fixed in 4.5.0-tuxcare.8...

CVE-2026-111368

The ClassroomIO application (versions through 1.0.0 ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the Hono API course submission routes. The root cause allows authenticated course tutors or admins to access and manipulate data from other courses by providing their own...

CLSA-2026-1792099789 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 21 org.springframework.security packages to address 2 CVEs. Fixed in 5.7.11-tuxcare.10...

CLSA-2026-1792099763 TuxCare security update for org.springframework.security (3 CVEs)

TuxCare rebuilt 21 org.springframework.security packages to address 3 CVEs. Fixed in 5.5.8-tuxcare.2...

CVE-2026-105036

EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.120260617182218release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC...

Arlo

Arlo Extract executable binaries from Arlo dump & updates See blogpost at https://www.synacktiv.com/publications/arlo-im-watching-you Parser arlo.py is used to parse a Flash memory dump, download and parse updates or list knwon models. It requires cryptography, asn1crypto and requests pip package...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/ ◈ Vulnerability Field| Detail ---|--- CVE ID| CVE-2025-13342 Score| 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Affected| Frontend Admin by DynamiApps ≤ 3.28.20 Auth| None —...

CVE-2026-106708

XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery CSRF vulnerability in the user management controller JobUserController. The endpoints /user/insert, /user/update, and /user/delete lack CSRF protection and do not restrict HTTP method...

DEBIAN-CVE-2026-110875

AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...

CVE-2026-110875

AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...

EUVD-2026-102350

AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...

CVE-2026-110875

AdPlug versions through 2.4 are vulnerable to a heap-based buffer overflow in the CksmPlayer::update() function located in src/ksm.cpp. The vulnerability occurs because the software writes past the fixed databuf[2048] array without performing proper bounds checking. An attacker can exploit this b...

CVE-2026-110875 AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp

AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...