1297 matches found
CVE-2026-110912
π©Έ CVE-2026-110912 β ARPBleed π©Έ ARP Packet Handling Vulnerability | DragonFly BSD | Security Research π©Έ Overview ARPBleed is the name associated with the reported vulnerability CVE-2026-110912, involving improper handling of Address Resolution Protocol ARP packet length fields in DragonFly BSD...
CVE-2026-47858
CVE-2026-47858 β Spring Tools "live information" mode unauthenticated JMX RCE PoC δΈζ README | Advisory: Spring Security | CVE Record Vulnerability : Spring Tools for Eclipse β€ 5.2.0 / VSCodeΒ·CursorΒ·Theia β€ 2.2.0 start Spring Boot applications in live information mode enabled by default with JVM...
CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices
= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth "Heartbleed" Exploitation Framework Author: Sastra Adi Wiguna Purple Elite Teaming Date: January 20, 2026 Version: 1.0 Full-System Replication License: RED TEAM USE ONLY Do not distribute...
mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce
CVE-2026-20452 β MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 β Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...
CVE-2026-53918
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...
CVE-2026-53918
The odhcpd DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt is vulnerable to a heap-use-after-free (UAF) read in its DHCPv6 IA handler prior to version 25.12 . The issue occurs because the handler maintains a per-message first lease pointer; an adjacent-network client can craft a D...
CVE-2026-53918 odhcpd DHCPv6 IA dangling first pointer use-after-free
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...
CVE-2025-30050
The CGM CLININET software is vulnerable to Code Injection in the RunCGI.pm component. The root cause is that the component dynamically imports modules based on a user-supplied query parameter, allowing an attacker from an adjacent network to execute arbitrary code with root privileges by providin...
EUVD-2025-211175
CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents. This issue...
Dell SupportAssist OS Recovery < 5.5.16.3 Multiple Vulnerabilities (DSA-2026-426)
Dell SupportAssist OS Recovery is installed on the remote Windows host. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2026-426 advisory. - Insufficient Verification of Data Authenticity. An unauthenticated attacker with adjacent network access could bypass manife...
CVE-2018-17873
CVE-2018-17873 WiFiRanger indoor routers Core, GoAC and their outdoor paired routers Sky Pro, EliteAC, EliteAC FM running firmware version 7.0.8rc3 and earlier allow anonymous FTP read/write access and have left the SSH Private Key in the clear - making it a trivial task to view/copy the key and...
CVE-2026-101773
A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to cause a Denial of Service DoS by hanging or repeatedly...
CVE-2026-101781
A flaw was found in MySQL's Group Replication Group Communication System GCS. An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Successful exploitation allows the attacker to take over the MySQ...
EUVD-2026-104643
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...
EUVD-2026-104644
TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated...
CVE-2026-105814
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...
CVE-2026-105815
TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated...
CVE-2026-105815 Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210
TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated...
CVE-2026-105815
The TP-Link Tapo C210 (V3.60) is vulnerable to an Improper Authentication flaw (CWE-287) where unauthenticated DS JSON API requests expose shared credential material and cryptographic metadata. An unauthenticated attacker on an adjacent network can leverage this exposed material as an administrat...
CVE-2026-105814
The TP-Link Tapo C210 (V3.60) contains an authentication bypass vulnerability within the DS JSON API . The root cause is an order-dependent flaw where a crafted JSON request combining a protected operation with public onboarding-related fields causes inconsistent module-level authorization checks...