19881 matches found
CVE-2019-9673
creationtimestamp| type| source ---|---|--- 2026-08-27 14:00:12+00:00| published-proof-of-concept| Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE 2026-08-28 00:00:43+00:00| published-proof-of-concept| Telegram/uFKuhzjL4w1ghh9qImWl4mkE9uG6FMJvqHn56zexlO-GvjE...
CVE-2026-74232 Zbtlink MQWrt yunmgrd Cloud C2 Implant
Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...
EUVD-2026-66999
Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...
CVE-2026-74232
Multiple Zbtlink , MoreQuick , and other router/AP models (e.g., AP522, AP7628, HC5661A, APG721B, HK300, MAP-N10) ship a backdoor C2 implant (yunmgrd) reachable over an unauthenticated cleartext UDP channel to a hardcoded C2 server . A remote unauthenticated attacker on the network path can hijac...
CVE-2026-80525
A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC4 topology component. During suspend and resume operations, the system fails to refresh the Inter-Process Communication IPC payload for audio copier widgets. This oversight causes outdated Direct Memory Access DMA channel assignmen...
CVE-1999-9625
creationtimestamp| type| source ---|---|--- 2026-08-27 09:00:04+00:00| seen| https://t.me/thehaking/1905 2026-08-28 00:00:57+00:00| seen| https://t.me/thehaking/1905...
EUVD-2026-66470
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fails. But if cpinit fails, and cp-initialized is not enabled, the same...
EUVD-2026-66469
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...
CVE-2024-380639
creationtimestamp| type| source ---|---|--- 2026-08-27 04:00:05+00:00| seen| https://t.me/xhqcankao/12727 2026-08-28 00:01:01+00:00| seen| https://t.me/xhqcankao/12727...
CVE-2026-77622
creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834 2026-08-27 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99834...
GHSA-MM85-Q63V-4476
creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411...
CVE-2026-81027
one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...
CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning
one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...
CVE-2026-81027
one-api (through version 0.6.10 ) contains an authorization bypass in its channel-pinning logic in middleware/auth.go. The software offers two ways to pin a request to a specific upstream channel: a suffix on the API key and a URL path parameter (channelid). Only the suffix path is gated behind a...
EUVD-2026-66603
one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...
CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning
one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...
CVE-2026-80555
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fails. But if cpinit fails, and cp-initialized is not enabled, the same...
AZL-97758 CVE-2026-80555 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fails. But if cpinit fails, and cp-initialized is not enabled, the same...
AZL-97772 CVE-2026-80554 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...
CVE-2026-80554
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...