TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

CVE-2026-126307

Nezha Dashboard before 2.6.0 contains multiple authorization, tenant isolation, and resource exhaustion vulnerabilities that allow members or unauthenticated attackers to abuse NAT, DDNS, OAuth, cron, and server transfer features. Attackers can claim undeclared Dashboard hostnames to capture logi...

CVE-2026-126307 Nezha Dashboard before 2.6.0 Multiple Authorization and Tenant Isolation Flaws

Nezha Dashboard before 2.6.0 contains multiple authorization, tenant isolation, and resource exhaustion vulnerabilities that allow members or unauthenticated attackers to abuse NAT, DDNS, OAuth, cron, and server transfer features. Attackers can claim undeclared Dashboard hostnames to capture logi...

EUVD-2026-125213

Nezha Dashboard before 2.6.0 contains multiple authorization, tenant isolation, and resource exhaustion vulnerabilities that allow members or unauthenticated attackers to abuse NAT, DDNS, OAuth, cron, and server transfer features. Attackers can claim undeclared Dashboard hostnames to capture logi...

CVE-2026-126307

Nezha Dashboard versions before 2.6.0 are vulnerable to multiple authorization , tenant isolation , and resource exhaustion flaws. These vulnerabilities allow members or unauthenticated attackers to abuse several features, including NAT , DDNS , OAuth , cron , and server transfer . Specifically, ...

CVE-2026-126307 Nezha Dashboard before 2.6.0 Multiple Authorization and Tenant Isolation Flaws

Nezha Dashboard before 2.6.0 contains multiple authorization, tenant isolation, and resource exhaustion vulnerabilities that allow members or unauthenticated attackers to abuse NAT, DDNS, OAuth, cron, and server transfer features. Attackers can claim undeclared Dashboard hostnames to capture logi...

PT-2026-146638

Nezha Dashboard before 2.6.0 contains multiple authorization, tenant isolation, and resource exhaustion vulnerabilities that allow members or unauthenticated attackers to abuse NAT, DDNS, OAuth, cron, and server transfer features. Attackers can claim undeclared Dashboard hostnames to capture logi...

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Proof-of-Concept PoC exploit chain targeting the TP-Link Omada ER605 DDNS client daemon cmxddnsd when the device is configured to use the Comexe DDNS service. ⚠️ Legal / Ethics : This...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

CVE-2026-111387

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387 Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387 Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

EUVD-2026-102568

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387 Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387

Nezha versions 2.2.5 before 2.3.15 are vulnerable to an information disclosure flaw in the listDDNS function. The root cause is the omission of redaction for WebhookURL and WebhookRequestBody , allowing authenticated users to view sensitive data. Specifically, administrators or Personal Access To...

PT-2026-115393

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387: Improper Removal of Sensitive Information Before Storage or Transfer

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

Nezhahq Nezha information leakage vulnerability

Versions of Nezhahq Nezha from 2.2.5 to 2.3.15 contained an information leakage vulnerability. This vulnerability stemmed from the fact that listDDNS did not anonymize the WebhookURL and WebhookRequestBody. Administrators or PATs with the nezha:ddns:read permission could read the plaintext tokens...