65 matches found
CVE-2026-71932
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...
CVE-2026-71916
Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the commandTable function. The root cause is incomplete filtering of dangerous characters—specifically backticks, newline characters, and single quotes—within the parameter field, allowing a remote attack...
CVE-2026-22229 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0
A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device,...
Microsoft Will Finally Kill an Encryption Cipher That Enabled a Decade of Windows Hacks
The weak RC4 for administrative authentication has been a hacker holy grail for decades...
EUVD-2008-5196
Malware in sbrugna...
EUVD-2009-4769
Malware in sbrugna...
EUVD-2011-0410
Malware in sbrugna...
EUVD-2011-0409
Malware in sbrugna...
EUVD-2008-2875
Malware in sbrugna...
EUVD-2009-2324
Malware in sbrugna...
EUVD-2009-4806
Malware in sbrugna...
EUVD-2008-6678
Malware in sbrugna...
EUVD-2011-4974
Malware in sbrugna...
EUVD-2014-2115
Malware in sbrugna...
EUVD-2008-4150
Malware in sbrugna...
EUVD-2013-5508
Malware in sbrugna...
EUVD-2017-16960
Malware in sbrugna...
EUVD-2008-5937
Malware in sbrugna...