122607 matches found
CVE-2026-71945
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...
CVE-2026-71944
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...
CVE-2026-8496
creationtimestamp| type| source ---|---|--- 2026-08-08 17:03:31+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mslkgvjtcb2o...
CVE-2026-14222
creationtimestamp| type| source ---|---|--- 2026-08-08 15:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msleguihrb2y...
CVE-2026-14305
creationtimestamp| type| source ---|---|--- 2026-08-08 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskjmk2wcy2u 2026-08-09 03:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmmoe6fis2l...
CVE-2015-6609
creationtimestamp| type| source ---|---|--- 2026-08-08 04:30:05+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3mskadlvn4c2c 2026-08-08 15:03:18+00:00| seen| https://bsky.app/profile/grapheneos.org/post/3msldpwlkik2w 2026-08-09 03:19:22+00:00| seen|...
GHSA-54FX-42GC-7VW4
creationtimestamp| type| source ---|---|--- 2026-08-08 00:34:16+00:00| seen| https://gist.github.com/alon710/b3f3e72bf33c744afdd90509c65dceb1...
PT-2026-69211
Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formLtefotaUpgradeFibocom' endpoint. A remote attacker can inject arbitrary malicious commands through the...
EulerOS 2.0 SP11 : vim (EulerOS-SA-2026-3109)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in...
PT-2026-69210
Name of the Vulnerable Software and Affected Versions D-Link DWR-M961 hardware version C1 versions prior to 1.1.5 C1 202607071108 Description A command injection issue exists in the '/boafrm/formLtefotaUpgradeQuectel' endpoint. A remote attacker can inject arbitrary malicious commands through the...
CVE-2026-18353
A flaw was found in PIA. An unauthenticated attacker can exploit a Server-Side Request Forgery SSRF vulnerability by crafting a malicious OpenID Connect OIDC issuer URL. This bypasses an internal allowlist due to inconsistent URL parsing between Python's urlparse and the requests/urllib3 librarie...
CVE-2026-47664
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the $import-pnp operation in Pathling Server accepts a caller-supplied exportUrl and uses it as the remote FHIR Bulk Export endpoint without...
CVE-2026-19246
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-50540
creationtimestamp| type| source ---|---|--- 2026-08-07 21:16:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjhxzxuly2n 2026-08-23 19:14:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/27lennt4z7xbp...
CVE-2026-19246 HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-19246 HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-19246 HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
EUVD-2026-54680
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-19246
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-47664
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the $import-pnp operation in Pathling Server accepts a caller-supplied exportUrl and uses it as the remote FHIR Bulk Export endpoint without...