CVE-2026-71939 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causin...

CVE-2026-71936

Multiple DrayTek VigorSwitch models contain a buffer overflow in the sysreboot function, caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker with valid administrative credentials on the device's web management interface can trigger the flaw via crafted ...

CVE-2026-71935 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

EUVD-2026-64993

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

EUVD-2026-64989

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71929

Multiple DrayTek VigorSwitch models contain an OS command injection vulnerability in the setDevProto function, caused by insufficient filtering of the username and password fields before command execution. A remote attacker with valid administrative credentials for the device's web management int...

EUVD-2026-64986

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71919

Multiple DrayTek VigorSwitch models contain an OS command injection vulnerability in the sysreboot function, caused by insufficient filtering of the config, act, pathN, and valueN fields before command execution. A remote attacker with valid administrative credentials for the device's web managem...

EUVD-2026-64969

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, and CMD6 fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71907 DrayTek VigorAP Multiple Models OS Command Injection via setcamset

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

EUVD-2026-64966

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

EUVD-2026-64965

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

EUVD-2026-64964

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

EUVD-2026-64963

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the eventcode field is concatenated into a system command. A remote attacker can trigger this vulnerabili...

CVE-2023-32315

CVE-2023-32315 La console amministrativa di Openfire Admin Console, un'applicazione web, è risultata vulnerabile a un attacco di path traversal tramite l'ambiente di setup. Ciò ha permesso a un utente non autenticato di utilizzare l'ambiente di setup non autenticato di Openfire in un ambiente...

CVE-2023-2833

CVE-2023-2833 Generatore di Exploit di Massa di Alucard0x1 Questo repository contiene un exploit per CVE-2023-2833, una vulnerabilità di escalation dei privilegi nel plugin ReviewX per WordPress fino alla versione 1.6.13 inclusa. Descrizione Il plugin ReviewX è vulnerabile all'escalation dei...

EUVD-2026-64955

rConfig 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was explicit...

CVE-2026-77915

rConfig versions 8.0.0 through before 8.2.13 contain a critical authentication bypass (CVSS 3.1: 9.8 ) caused by a duplicate bare Auth::routes() call in routes/web.php that re-enables the POST /register route after it was explicitly disabled. Because the registration controller does not assign a ...

CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...