57812 matches found
EUVD-2026-18360
A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function updatepcdb of the file /setup.cgi. The manipulation of the argument macpcdba results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the...
EUVD-2026-18370
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
CVE-2026-30603
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
CVE-2026-30603
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
PT-2026-29803
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
CVE-2026-30603
CVE-2026-30603 concerns the firmware update mechanism of the Qianniao QN-L23PA0904 (version v20250721.1640). The available documents state that an attacker can achieve root access, install backdoors, and exfiltrate data by providing a crafted iu.sh script via an SD card. The connected sources do ...
Qianniao QN-L23PA0904 安全漏洞
Qianniao QN-L23PA0904 is a laptop power adapter produced by Qianniao Corporation. The version v20250721.1640 of Qianniao QN-L23PA0904 contains a security vulnerability. This vulnerability stems from issues with the firmware update mechanism. Attackers can obtain root access, install backdoors, an...
CVE-2026-30603
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
PT-2026-29892
Name of the Vulnerable Software and Affected Versions Hirschmann HiEOS devices versions prior to 01.1.00 Description Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass in the HTTPS management module. Attackers can gain administrative access by sending specially...
ovmf-202602-6.1 on GA media (moderate)
ovmf-202602-6.1 on GA media Announcement ID: openSUSE-SU-2026:10467-1 Rating: moderate Cross-References: CVE-2025-2296 CVSS scores: CVE-2025-2296 SUSE : 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L CVE-2025-2296 SUSE : 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N Affect...
CVE-2026-30603
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
The vulnerability of the fw_dev_release() function in the drivers/base/firmware_loader/sysfs.c module of the Linux kernel’s device drivers allows a hacker to trigger a service failure.
The vulnerability of the fwdevrelease function in the drivers/base/firmwareloader/sysfs.c file of the Linux kernel’s device drivers relates to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CVE-2026-34871
An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator PRNG...
CVE-2025-66442
In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...
CVE-2025-66442
In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel in RSA and CBC/ECB decryption that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected...
PT-2026-29648
CVE-2026-32927 V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set temp type default. Opening a crafted V7 file may lead to information d… https://t.co/WrFaGwZjnU...
The vulnerability of the igb_set_fw_version() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a system failure.
The vulnerability of the igbsetfwversion function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Intel Ethernet network adapter support driver in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service...
Updated freeipmi packages fix security vulnerability
ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. CVE-2026-33554...
EUVD-2026-17335
A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file /goform/setSysAdm. The manipulation of the argument admuser leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be use...
