232405 matches found
EUVD-2026-63083
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-76583
TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.
CVE-2026-75616 Command Injection in Router Web Management Interface
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...
CVE-2026-53547 Termix: Account Takeover via Global Settings Disclosure
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /database/export endpoint creates a user export that includes the global settings table even though the rest of the export is user-scoped. The settings table...
CVE-Disclosures
CVE-Disclosures...
EUVD-2026-62852
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2026-76582
TRENDnet TEW-821DAP firmware 2.2.01b05 passes the unsanitized ipaddr argument from /cgi-bin/ping.cgi to popen/system in the ssi component, enabling remote command injection; a proof-of-concept exploit is publicly available on GitHub. No patch or workaround is mentioned in the provided documents.
CVE-2026-76582 TRENDnet TEW-821DAP ssi ping.cgi system command injection
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2026-17106 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, ctop-fips, telegraf, buildah, falcoctl-fips, docker-cli-buildx-fips, kaniko-fips, openbao, podman-fips, buildkitd-fips, act, kubescape, docker-fips, skaffold, kubescape-server, kaniko, kubescape-server-fips, openbao-fips, podman, buildkitd,...
CVE-2026-16914
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write...
CVE-2026-16872
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-76576 yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...
EUVD-2026-62846
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...
CVE-2026-76576 yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...
CVE-2025-14600
creationtimestamp| type| source ---|---|--- 2026-08-19 20:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjxsgklv2b 2026-08-19 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthu2ikmaa2f 2026-08-20 00:19:44+00:00| seen|...
EUVD-2026-62836
A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...
CVE-2026-16875
A local attacker with low privileges on IBM AIX 7.2/7.3 or PowerVM VIOS 4.1 can inject shell metacharacters to execute arbitrary commands, scoring CVSS 7.8 (High). IBM's support page (https://www.ibm.com/support/pages/node/7283858) should be checked for available patches or workarounds.
MINI-398F-HCH3-MVX2
Bulletin has no description...