CVE-2026-6940

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:58+00:00| seen| Telegram/EOmUzEDCCjVld0ErnrIDoAMYFcT1xcXC6s4XJmAqdlxQalE...

CVE-2025-6940

A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...

CVE-2025-6940

A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...

CVE-2025-6940

creationtimestamp| type| source ---|---|--- 2025-07-01 03:10:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20002...

CVE-2025-6940 TOTOLINK A702R HTTP POST Request formParentControl buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...

CVE-2025-6940 TOTOLINK A702R HTTP POST Request formParentControl buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...

Ubuntu 16.04 LTS / 18.04 LTS : snapd vulnerabilities (USN-6940-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6940-2 advisory. USN-6940-1 fixed vulnerabilities in snapd. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. Tenable...

Ubuntu: Security Advisory (USN-6940-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-6940

creationtimestamp| type| source ---|---|--- 2024-07-21 09:11:16+00:00| seen| https://t.me/cvedetector/1299...

CVE-2024-6940 DedeCMS article_template_rand.php code injection

A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file articletemplaterand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-6940 DedeCMS article_template_rand.php code injection

A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file articletemplaterand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2023-6940

creationtimestamp| type| source ---|---|--- 2024-01-12 14:36:56+00:00| seen| https://t.me/ctinow/167275...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +337 more potentially affected by CVE-2023-6940 via mlflow (>=0.8.2 <=2.9.1)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 - apache-submarine =0.6.0 and more Source cves: CVE-2023-6940 Source advisory: OSV:GHSA-HVC6-42VF-JHF8...

CVE-2023-6940

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

CVE-2023-6940

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

CVE-2023-6940 Command Injection

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

CVE-2023-6940 Command Injection

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

CVE-2023-6940

CVE-2023-6940 is a command-injection vulnerability affecting mlflow where a single user interaction (e.g., loading a malicious config) can lead to full command execution on the host. The publicly documented root cause in at least one source is unsafe YAML/config rendering due to not sandboxing th...

Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2023-6940)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6940 advisory. - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz2223308...

CVE-2020-27640

CVE-2020-27640 affects Mitel MiVoice 6940 and 6930 MiNet Bluetooth handsets running firmware earlier than 1.5.3. An unauthenticated attacker within Bluetooth range can pair a rogue device when the handset loses connection due to an improper pairing mechanism, enabling potential eavesdropping on c...