15 matches found
CVE-2026-27692
creationtimestamp| type| source ---|---|--- 2026-02-25 18:23:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfpchqnl5h2u 2026-02-27 09:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mftg4xpb6a2i...
CVE-2026-27692
In iccDEV, versions up to 2.3.1.4 are affected by a heap-buffer-overflow in CIccTagTextDescription::Release() triggered while parsing ICC profile XML text description tags, as strlen() reads past a heap buffer. This can cause a crash. The issue is addressed by commit 29d088840b962a7cdd35993dfabc2...
CVE-2021-27692
creationtimestamp| type| source ---|---|--- 2025-06-10 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3qzz3u2u 2026-06-23 14:06:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eea7e61e-c4af-4f2c-980b-d99ec90d7b8f...
CVE-2021-27692
Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...
CVE-2025-27692
creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyuik526 2025-04-02 04:07:10+00:00| seen| https://t.me/cvedetector/21840...
CVE-2025-27692
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution...
CVE-2025-27692
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution...
CVE-2025-27692
Dell Wyse Management Suite prior to version 5.1 is affected by an Unrestricted Upload of File with Dangerous Type vulnerability. The issue concerns the upload mechanism (unrestricted file types) that could be exploited by a high-privilege attacker with remote access to cause denial of service, in...
CVE-2024-27692
creationtimestamp| type| source ---|---|--- 2024-03-01 18:31:38+00:00| seen| https://t.me/ctinow/197879...
CVE-2021-27692
Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUSBPartitionUmount" function executes the...
CVE-2021-27692
CVE-2021-27692 affects Tenda G1 and G3 routers (firmware v15.11.0.17(9502)_CN and v15.11.0.16(9024)_CN). The vulnerability is a command injection where the function that handles the USB partition unmount action (formSetUSBPartitionUmount) passes untrusted input to doSystemCmd, enabling remote att...
CVE-2020-27692
creationtimestamp| type| source ---|---|--- 2020-11-05 00:42:44+00:00| seen| https://t.me/cibsecurity/15849...
CVE-2020-27692
The CVE-2020-27692 entry concerns the Relish (Verve Connect) VH510 hub, with firmware prior to 1.0.1.6L0516. Multiple CSRF flaws exist in the device’s web management portal that can be leveraged to modify TR-069 configuration, enabling remote reboot or uploading malicious firmware. Connected sour...
CVE-2024-27692
...
CVE-2024-27692
The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...