62316 matches found
EUVD-2024-55692
The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...
PT-2026-61817
A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multi uploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may ...
PT-2026-61979
Name of the Vulnerable Software and Affected Versions Apple Find My backend service versions prior to 2025-12-18 Description The backend service allows an attacker with a valid Private Endpoint Token PET to enumerate devices and remove offline devices from an Apple ID account. This process bypass...
PT-2026-61989
In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability CWE-284 / CWE-862 has been identified in the Direct Device Integration DDI Controller. This vulnerability allows an authenticated device to escalate its permissions and bypass the strict boundaries of its assigned...
D-Link DNS-320 Upload Component DoS
The vulnerability of the /photocenter/php/uploadify.php component in the D-Link DNS-320 network storage software is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability allows an attacker to cause service failures...
EulerOS Virtualization 2.12.0 : util-linux (EulerOS-SA-2026-2810)
According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerabilit...
CVE-2026-44878: Insecure Temporary File
A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete syste...
CVE-2025-68640: Improper Authentication
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...
PT-2026-62107
Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign tx / sign tx eip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present...
PT-2026-62108
Name of the Vulnerable Software and Affected Versions ECOS affected versions not specified Description A flaw in the web-based management interface allows a highly privileged, authenticated remote attacker to access the device filesystem. This could enable the attacker to access sensitive files o...
EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock ...
CVE-2026-63826
A flaw was found in the Linux kernel's framebuffer device fbdev component. When the storemodes function replaces a framebuffer's list of display modes, it fails to properly clear old pointers before freeing the old list. This can result in a use-after-free vulnerability, a type of memory...
CVE-2026-63822
A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability, a double free, occurs when memory buffers are incorrectly released twice during the device unbinding process after an initial firmware initialization error. This can lead to system instability or a kernel crash,...
MAL-2026-10920 Malicious code in alb-lambda-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e7f2cab2ae9d15c37e236190c685c42b7d3a0ecf92b7b72e9ad00b936ff186 Package name suggests an AWS CDK construct for ALB/Lambda but the shipped code is a thin @sentry/node wrapper. The npm preinstall script runs npm...
CVE-2026-64112
A flaw was found in the Linux kernel's Rados Block Device RBD module. A race condition exists in the lockdwork draining mechanism during the unmapping of an image. This allows the lockdwork to be re-queued after it is expected to be finalized, potentially leading to rbdacquirelock executing on...
CVE-2026-63797
A flaw was found in the Linux kernel's rpmsg character device. This vulnerability, a use-after-free, occurs during the probe process when an internal pointer to a device endpoint eptdev is prematurely stored. If an error occurs during the device's addition, the eptdev memory is freed, but the...
CVE-2026-53371
A flaw was found in the Linux kernel's ionic Remote Direct Memory Access RDMA driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the nodedesc sysfs file. If the nodedesc field is not null-terminated, the system will read beyond its allocated...
CVE-2026-64121
A flaw was found in the Linux kernel's Intermediate Functional Block ifb network device. A local user with network configuration privileges can trigger a slab-out-of-bounds read by configuring an asymmetric ifb device and querying its ethtool statistics. This vulnerability can lead to a kernel...
CVE-2026-64106
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architecture, specifically within the virtual Generic Interrupt Controller vgic-its module. A local user in userspace can restore an Interrupt Translation Service ITS Device Table Entry DTE with a size field that...
