CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...

axiom

ADVERTENCIA : Axiom Classic ahora está en modo de mantenimiento. Te animamos a migrar al nuevo Ax Framework. En los próximos meses, introduciremos actualizaciones esenciales de calidad de vida a Axiom Classic antes de 2025. ¡Larga vida a Axiom! Axiom es un marco de infraestructura dinámico para...

aiocqhttp-sanic (>=1.2.3a1, <=1.2.3), ax (>=0.39.0, <=0.42.0) +11 more potentially affected by CVE-2026-85078 via sanic (19.3.1)

sanic PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aiocqhttp-sanic =1.2.3a1, =0.39.0, =1.4.2rc1, =1.0.0rc1, =0.1.0a1, =0.3.0, =0.1.0, =0.3.0, =0.7.0 Source cves: CVE-2026-85078 Source advisory:...

Linux kernel ax25_release ax25_bind Data Compromise

The vulnerability of the ax25release and ax25bind functions in the net/ax25/afax25.c module, which implements networking functions in the Linux kernel, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100358 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-9335 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-9335 Source...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-53533 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

acuity (6.18.0), acuitylite (>=6.6.0, <=6.21.0) +60 more potentially affected by CVE-2022-35965 via tensorflow (2.8.0)

tensorflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - acuity 6.18.0 - acuitylite =6.6.0, =1.2.8, =1.0.43, =0.2.2, =0.0.1, =0.0.2, =0.2.8, =0.14.0, =0.1.3, =0.0.9, =0.2.27, =0.2.41 -...

acuity (6.18.0), acuitylite (>=6.6.0, <=6.21.0) +60 more potentially affected by CVE-2022-29205 via tensorflow (2.8.0)

tensorflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - acuity 6.18.0 - acuitylite =6.6.0, =1.2.8, =1.0.43, =0.2.2, =0.0.1, =0.0.2, =0.2.8, =0.14.0, =0.1.3, =0.0.9, =0.2.27, =0.2.41 -...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-11816 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-11816 Source...

EUVD-2023-50669

Certain GL.iNet devices with 4.x firmware allow authentication bypass resulting in administrative control of the device via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-1462 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-1462 Source...

EUVD-2026-20546

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

actscene-ocr (>=0.1.3, <=0.1.5), aio-binance-library (>=2.0.1, <=2.0.6) +154 more potentially affected by CVE-2026-32875 via ujson (>=5.1.0, <=5.11.0)

ujson PYPI version =5.1.0, =0.1.3, =2.0.1, =0.1.0, =1.3.12, =1.0.5, =0.1.0a2, =0.0.1, =1.0.0, =2.2.0, =2.3.0 and more Source cves: CVE-2026-32875 Source advisory: SNYK:PYTHON-UJSON-15682605...

Fortinet FortiSwitchAXFixed Access Control Command Execution

The vulnerability of Fortinet FortiSwitchAXFixed microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary system commands using a specially created SSH configuration file...

CVE-2025-58345

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/apcertif11axmode write operation, leading to...

CVE-2025-58345

The Wi-Fi driver in Samsung Mobile Processor and Wearable Processor (including Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 ) is vulnerable to kernel memory exhaustion . The root cause is an unbounded memory allocation triggered by a large buffer during a write opera...