133 matches found
CVE-2026-95675
CVE-2026-95675 — D-Link DAP-1360 RevB formSystemCheck ハンドラにおける未認証のリモート root コマンド実行 CWE-78 — OS コマンドインジェクション で、ハードコードされた認証バックドア経由で到達可能。DAP-1360 RevB、ファームウェア 2.14B05 で検証済み。 根本原因 連鎖する 2 つの独立した問題: 1. ハードコードされた認証バイパスパス。 main httpd @ 0x4064c8 内: strcasecmprequestpath, "dEfWzDLOgIn" ; token @ 0x48046c...
CVE-2026-95675
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...
EUVD-2026-84394
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...
CVE-2026-95675
D-Link DAP-1360 firmware 6.14 and earlier is affected by an unauthenticated remote code execution vulnerability in the device's web management interface . Remote attackers can send crafted requests without valid credentials to execute arbitrary commands as root , enabling full device compromise, ...
CVE-2026-95675 D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...
CVE-2026-95675 D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...
CVE-2026-95675: Improper Neutralization of Special Elements used in an OS Command
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...
PT-2026-96729
Name of the Vulnerable Software and Affected Versions D-Link DAP-1360 versions 6.14 and earlier Description An unauthenticated remote code execution issue exists in the web management interface. Remote attackers can execute arbitrary commands with root privileges by sending crafted HTTP requests ...
EUVD-2014-1098
Malware in sbrugna...
EUVD-2014-1100
Malware in sbrugna...
EUVD-2014-1097
Malware in sbrugna...
EUVD-2023-36412
Malicious code in bioql PyPI...
EUVD-2023-36405
Malicious code in bioql PyPI...
EUVD-2023-36411
Malicious code in bioql PyPI...
EUVD-2023-36410
Malicious code in bioql PyPI...
EUVD-2023-36413
Malicious code in bioql PyPI...
EUVD-2023-36406
Malicious code in bioql PyPI...
EUVD-2023-36404
Malicious code in bioql PyPI...