mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC de desbordamiento de montón en el AP WLAN de MediaTek Exploit de prueba de concepto para CVE-2026-20452, un desbordamiento de búfer basado en montón en el controlador del punto de acceso WLAN de MediaTek. Vulnerabilidad CVE : CVE-2026-20452 CVSS : 8.0 ALTA CWE : CWE-122 —...

cups-filters-1.28.17-9.1 on GA media (moderate)

cups-filters-1.28.17-9.1 on GA media Announcement ID: openSUSE-SU-2026:11681-1 Rating: moderate Cross-References: CVE-2026-64611 CVE-2026-64612 CVSS scores: CVE-2026-64611 SUSE : 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-64611 SUSE : 7.1...

CVE-2018-17873

CVE-2018-17873 运行固件版本 7.0.8rc3 及更早版本的 WiFiRanger 室内路由器（Core、GoAC）及其室外配对路由器（Sky Pro、EliteAC、EliteAC FM）允许匿名 FTP 读写访问，并且 SSH 私钥以明文形式保留——这使得查看/复制密钥并以 root 权限登录变得轻而易举。 利用此漏洞需要相邻网络访问。 漏洞利用： 极其简单的 shell 脚本，可获取私钥并以 root 身份登录。 使用方法： ./wifiRangerPwn.sh...

CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

CVE-2026-73763

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

EUVD-2026-69627

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

CVE-2026-73763 Unauthenticated Remote Command Execution in Management Component

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

CVE-2026-73763

CVE-2026-73763 affects an HPE management component , where an unauthenticated adjacent attacker with high complexity can execute arbitrary commands in the context of the affected utility. The vulnerability requires no user interaction and yields high impact to both confidentiality and integrity ,...

CVE-2026-73726

A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...

CVE-2026-73709

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacke...

CVE-2026-19766

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md：CVE-2025-13834 RFCOMM 蓝牙“心血”漏洞利用框架 作者： Sastra Adi Wiguna（紫色精英团队） 日期： 2026年1月20日 版本： 1.0（全系统复现） 许可证： 仅供红队使用 （未经授权不得分发） 🔴 执行摘要 CVE-2025-13834 是 RFCOMM 蓝牙协议栈中的一个关键内存泄露漏洞 ，类似于 Heartbleed（CVE-2014-0160） ，但影响 28 亿台支持蓝牙的设备...

CVE-2026-73737

An unauthenticated path traversal vulnerability affects the API endpoint of HPE Networking Fabric Composer . A successful exploit allows an adjacent, unauthenticated attacker with high complexity and user interaction to manipulate user-generated files, potentially causing unauthorized changes to ...

EUVD-2026-69436

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacke...

CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

PT-2026-84481

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw in a management component allows an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation enables remote command...

CVE-2026-77975

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the...

CVE-2026-73819

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...

EUVD-2026-68610

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...

CVE-2026-73819

Ebyte NE2-D11 (and NA111-M ) vendor configuration utility contains a weak authentication flaw: under certain credential conditions, administrative functions are accessible without verifying the operator's identity. An unauthenticated attacker on the adjacent network could modify critical settings...