mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC de desbordamiento de montón en el AP WLAN de MediaTek Exploit de prueba de concepto para CVE-2026-20452, un desbordamiento de búfer basado en montón en el controlador del punto de acceso WLAN de MediaTek. Vulnerabilidad CVE : CVE-2026-20452 CVSS : 8.0 ALTA CWE : CWE-122 —...

CVE-2018-17873

CVE-2018-17873 Los routers indoor de WiFiRanger Core, GoAC y sus routers outdoor emparejados Sky Pro, EliteAC, EliteAC FM que ejecutan la versión de firmware 7.0.8rc3 y anteriores permiten acceso anónimo de lectura/escritura por FTP y han dejado la clave privada SSH en texto claro, lo que hace...

EUVD-2026-91040

A command injection vulnerability exists in the TDDPv2 service /usr/bin/tddp on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot. Successful exploitation may result...

CVE-2026-84682 TDDPv2 setProductVer Command Injection in Archer AX90

A command injection vulnerability exists in the TDDPv2 service /usr/bin/tddp on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot. Successful exploitation may result...

CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: Marco de Explotación RFCOMM Bluetooth "Heartbleed" CVE-2025-13834 Autor: Sastra Adi Wiguna Purple Elite Teaming Fecha: 20 de enero de 2026 Versión: 1.0 Réplica a nivel de sistema completo Licencia: SOLO USO EN RED TEAM N...

PT-2026-103977

Name of the Vulnerable Software and Affected Versions Archer AX90 V1 affected versions not specified Description An unauthenticated adjacent-network attacker can execute arbitrary operating system commands with root privileges during device boot. This is possible by exploiting the setProductVer...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-88736

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and 5.36 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit this flaw to cause Information disclosure , Information tampering , and a...

CVE-2026-73594: Improper Certificate Validation

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

SolarWinds Observability Self-Hosted < 2026.2.3 Multiple Vulnerabilities

The version of SolarWinds Observability Self-Hosted installed on the remote host is prior to 2026.2.3. It is, therefore, affected by multiple vulnerabilities: - An insufficient verification of data authenticity vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar...

CVE-2026-82566

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing...

CVE-2026-84399

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

CVE-2026-85496

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...

CVE-2026-77967

The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication value could replay it from another clie...

CVE-2026-77967

The Botslab G980H dash camera firmware is vulnerable to an authentication bypass due to a lack of freshness verification or client association checks for authentication values. An unauthenticated attacker with adjacent network access can capture a valid authentication value and perform a capture-...

CVE-2026-77967 Botslab G980H Dashcams Authentication Bypass by Capture-replay

The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication value could replay it from another clie...

EUVD-2026-86450

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...