CVE-2026-100740

CVE-2026-100740 — D-Link DIR-895L L2TP OOB Write Python 3 PoC for CVE-2026-100740 — D-Link DIR-895L firmware A1102b07. Description PoCbit / GitHub CVE-2026-100740 — Out-of-bounds write CWE-787 / CWE-119 in tunnelsetparams tunnel.c, L2TP control channel parser. Host Name AVP length is clamped to 1...

SVPT_CW_2

CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 Setup for CW TRYHACKME provided room for working on this vulnerability. Below is the link to access the room https://tryhackme.com/r/room/monikerlink To access room through RDP we have to connect to TryHackMe VPN. Click...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the atl1 driver’s improper handling of the out-of-bounds cmbtpdnexttoclean value reported by hardware during PCIe link/mac reset operations. This could lead to loops that cannot be exited, resulting in a soft lock...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit Description This repository contains an exploit for CVE-2024-3273 , a critical vulnerability found in specific D-Link devices that allows for Remote Code Execution RCE. The vulnerability arises from improper input validation in the...

CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

D-Link

CVE-2024-10914 D-Link Remote Code Execution RCE D-Link NAS- Command Injection via Name Parameter CVE-2024-10914:- A vulnerability was found in D-Link DNS-320, DNS- 320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiusera...

-cve-2021-46381

D-Link DAP-1620 arbitrary file read vulnerability fofa search statement: "DAP-1620" && title=="D-LINK" Use python3 DLINL.py...

CVE-2023-33782

CVE-2023-33782 Description D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality. Proof of concept...

CVE-2026-18937

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-18937 CVE-2026-18937 Broken Link Checker 2.4.11 - wordpress.org I am @abraxasnull. Loopback lab. The client is CVE-2026-18937-Abraxas-Labs.py. Query vars become globals. On plain permalinks,...

CVE-2026-92433

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request CSRF, taking over the site's Patreon integration...

CVE-2026-97314

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics...

CVE-2026-97314

The ThirstyAffiliates WordPress plugin (versions before 3.12.1 ) contains a vulnerability in its link redirect tracking handler. The component fails to validate the status or type of the requested object, which enables unauthenticated attackers to disclose destination URLs for unpublished affilia...

EUVD-2026-103260

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics...

CVE-2026-97314 ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics...

CVE-2026-97314 ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection

The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics...

EUVD-2026-103251

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request CSRF, taking over the site's Patreon integration...

CVE-2017-6206

CVE-2017-6206 The DGS-1510 Websmart switch series firmware has been found to have security vulneratiblies. The vulnerabilities include unauthenticated command bypass and unauthenticated information disclosure. exploit.sh contains both PoC code and it will create a remote user at specified D-Link...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link CVE-2024-21413 — TryHackMe Status: ✅ Completed Date: 30 May 2025 🎯 Objective Understand and exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that bypasses Protected View using Moniker Links to leak NTLM credentials. Learn how to perform...

Linux Distros Unpatched Vulnerability : CVE-2026-109378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without...

PT-2026-116377

Name of the Vulnerable Software and Affected Versions ThirstyAffiliates versions prior to 3.12.1 Description An issue exists in the link redirect tracking handler that fails to verify the status or type of the requested object. This allows unauthenticated attackers to disclose destination URLs of...