Lucene search
+L

223471 matches found

Cvelist
Cvelist
added 2 days ago41 views

CVE-2026-18614 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection

A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enableechoserver of the file /cgi-bin/glc of the component s2s.so Native Plugin. Performing a manipulation of the argument port results in command injection. The attack may be initiated remotely. The exploit...

10CVSS0.02011EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-52395

A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.removepackage/plugins.installpackage of the file /cgi-bin/glc of the component plugins.so Native Plugin. This manipulation causes command injection. The attack can be initiated remotely. The...

10CVSS7.2AI score0.02157EPSS
SaveExploits0References8
NVD
NVD
added 2 days ago8 views

CVE-2026-18610

A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIPComFileList.aspx. The manipulation results in improper authentication. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early abo...

6.9CVSS0.00397EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago8 views

CVE-2026-18604

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The...

5.3CVSS0.00103EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago9 views

CVE-2026-18607

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...

9CVSS0.00438EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-18610

A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIPComFileList.aspx. The manipulation results in improper authentication. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early abo...

6.9CVSS5.2AI score0.00397EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2 days ago44 views

CVE-2026-18610 NewType WebEIP EIP_Com_FileList.aspx improper authentication

A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIPComFileList.aspx. The manipulation results in improper authentication. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early abo...

6.9CVSS0.00397EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-52371

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...

9CVSS8.2AI score0.00438EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago44 views

CVE-2026-18607 Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation o...

9CVSS0.00438EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago8 views

CVE-2026-18607

The CVE-2026-18607 affects Wavlink devices including WN572, WN570H, WN573, WN529, WN530, WN531, WN535, WN536, WN551, WN557, and NU516 (firmware up to 20260609). The vulnerability targets the strcpy function in lighttpd’s file upload.cgi, where manipulating the HTTP_COOKIE argument triggers a stac...

9CVSS8.2AI score0.00438EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-52351

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS6.8AI score0.00111EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago40 views

CVE-2026-18606 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS0.00111EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-52346

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. Performing a manipulation results in uncontrolled search path. The attack requires a local approach. The complexity of a...

7.3CVSS6.1AI score0.00116EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago42 views

CVE-2026-18605 CheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sys uncontrolled search path

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. Performing a manipulation results in uncontrolled search path. The attack requires a local approach. The complexity of a...

7.3CVSS0.00116EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago30 views

CVE-2026-39932

CVE-2026-39932 affects OpenEMR 8.2.0, enabling remote code execution through the document category tree component. The vulnerability arises from an unsanitized eval() in CategoryTree (library/classes/Tree.class.php) that executes PHP payloads injected into the categories table. An authenticated a...

9.4CVSS6.9AI score0.00773EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-52340

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The...

5.3CVSS5.5AI score0.00103EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago43 views

CVE-2026-18604 textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application components

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The...

5.3CVSS0.00103EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-18604

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The...

5.3CVSS5.5AI score0.00103EPSS
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
added 2 days ago16 views

guardx

🛡️ Guard Toolkit — Full Tutorial Security toolkit: Secret S...

9.9CVSS8.2AI score0.99999EPSS
SaveExploits133
NVD
NVD
added 2 days ago8 views

CVE-2026-18600

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

9CVSS0.01977EPSS
SaveExploits0References5
Rows per page
Query Builder