TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Explotando el router TP-Link Archer CR-700. Divulgado responsablemente a TP-Link Paso 1 - En tu máquina Linux Kali o Ubuntu escribe el siguiente comando gedit /etc/dhcp/dhclient.conf Comenta la siguiente línea send host-name = gethostname; Cópiala en la línea...

CVE-2026-19948: Missing Authorization

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.17. This is due to the plugin not properly verifying that a user is authorized to perform an...

CVE-2026-75019: Improper Neutralization of Input During Web Page Generation

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...

CVE-2026-16771

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the...

CVE-2026-16771 CVE-2026-16771

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the...

CVE-2026-16771: Missing Authentication for Critical Function

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the...

PT-2026-65570

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the...

AT&T's Arris BGW210-700 gateway contains authentication bypass vulnerability in LAN-side management interface

Overview Firmware versions 2.7.7 and earlier of the Arris BGW210-700 residential gateway contain an authentication bypass vulnerability, tracked as CVE-2026-16771, that allows any unauthenticated LAN-side user to read sensitive configuration data and modify device settings through web management...

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

CVE-2018-25423

Arm Whois 3.11 is affected by a local denial-of-service vulnerability due to a buffer overflow when processing an oversized input string (about 700 bytes) in the IP address or domain field. The flaw allows local attackers to crash the application. No remediation, patch version, or exploit details...

PT-2026-45123

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

CVE-2019-25588

BulletProof FTP Server 2019.0.0.50 contains a local-denial of service vulnerability in the DNS Address field. By enabling DNS Address in the Firewall settings and pasting a ~700-byte buffer, an attacker can crash the application when Test is invoked. Affects BulletProof FTP Server 2019.0.0.50; ro...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003618 advisory. Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003726 advisory. Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003592 advisory. Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003727 advisory. Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003670 advisory. Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003682 advisory. Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of...