CVE-2026-34977

creationtimestamp| type| source ---|---|--- 2026-04-06 18:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitw7xgec32z 2026-04-06 19:28:28+00:00| published-proof-of-concept| Telegram/nNz4AuVWmZsX2vjW9IzWDm0wIi6EKHH8QFJ1lll9JUSWJdI 2026-04-09 21:17:03+00:00| seen|...

CVE-2026-34977 Aperi'Solve Affected by Unauthenticated RCE via JPSeek Analyzer Command

Aperi'Solve is an open-source steganalysis web platform. Prior to 3.2.1, when uploading a JPEG, a user can specify an optional password to accompany the JPEG. This password is then directly passed into an expect command, which is then subsequently passed into a bash -c command, without any form o...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2023-34977

The CVE-2023-34977 entry describes a cross‑site scripting (XSS) vulnerability affecting QNAP Video Station. The issue could allow authenticated users to inject malicious code over the network. The vulnerability is fixed in Video Station 5.7.0 and later (released 2023‑07‑27). According to the prov...

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results fro...

CVE-2021-34977

The CVE-2021-34977 entry corresponds to an authentication-bypass vulnerability in NETGEAR R7000 routers (firmware around 1.0.11.116_10.2.100) where SOAP request processing fails to verify authentication before performing a password reset. This network-adjacent flaw enables an attacker to reset th...

CVE-2025-34977

...

CVE-2025-34977

This CVE entry is rejected/not used and does not represent an active vulnerability.