CVE-2026-50259

creationtimestamp| type| source ---|---|--- 2026-06-05 13:10:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk7kjdoty2k 2026-06-06 03:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlnx6g5nt2u 2026-06-06 22:39:01+00:00| seen|...

CVE-2026-25658

creationtimestamp| type| source ---|---|--- 2026-06-05 13:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk7ek56re2h...

CVE-2026-8914

creationtimestamp| type| source ---|---|--- 2026-06-05 11:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk2akmdy32f 2026-06-05 11:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnk2akmdy32f...

CVE-2026-11347

creationtimestamp| type| source ---|---|--- 2026-06-05 11:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjzxm64nd2k 2026-06-05 11:30:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjzxm64nd2k...

CVE-2026-48491

creationtimestamp| type| source ---|---|--- 2026-06-05 10:26:32+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-5r4w-85f3-pw66 2026-06-05 13:35:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkay2lpgr2j...

GHSA-V6WP-4M6F-GCJG

creationtimestamp| type| source ---|---|--- 2026-06-05 08:53:16+00:00| seen| https://gist.github.com/xinhongwang138-hue/6b83f89fed135d1aad9c8de5c574e471...

CVE-2026-50590

creationtimestamp| type| source ---|---|--- 2026-06-05 05:06:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjej66sst2h...

Multiple TP-Link products vulnerable to cleartext transmission of sensitive information

Overview Multiple TP-Link products provided by TP-Link Systems Inc. contain the following vulnerability. Cleartext transmission of sensitive information CWE-319 - CVE-2026-34126 eyegrep and izurina of L Plus LLC reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2026-50591

creationtimestamp| type| source ---|---|--- 2026-06-05 04:44:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjdctzxpa2h...

CVE-2026-50589

creationtimestamp| type| source ---|---|--- 2026-06-05 03:53:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjah6y5yp22 2026-06-06 02:21:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnllsiutgd2h...

EUVD-2026-34780

A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior to 2.11.13 allows an unauthenticated attacker within radio range to cause a Denial of Service kernel panic or potentially achieve Remote Code Execution via a...

EUVD-2026-34466

Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10878

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument actionvalue results in command injection. The attack is possible to be carried out remotely. The exploit is now public and...

CVE-2026-10878

Summary of vulnerability : CVE-2026-10878 affects D-Link DWR-M920 firmware versions 1.1.50 and 1.1.70. The issue resides in the function sub_41C8E8 of /boafrm/formSmsManage, where manipulation of the argument action_value leads to a command injection . The vulnerability enables remote exploitatio...

CVE-2026-10878

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument actionvalue results in command injection. The attack is possible to be carried out remotely. The exploit is now public and...

PT-2026-47080

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 2026.05.1 Description The 'connection-test' endpoint opens a raw TCP socket to a user-supplied database host without resolving or range-checking the destination. This allows private and link-local addresses, including...

PT-2026-47006

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub 412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI value causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used...

Morse Micro HaLowLink 安全漏洞

Morse Micro HaLowLink is a series of long-range wireless gateway devices developed by Morse Micro Corporation. Versions of Morse Micro HaLowLink prior to 2.2.11.13 contained security vulnerabilities. These vulnerabilities stemmed from the use of the IE length field as the size parameter for the...

D-Link DWR-M920 命令注入漏洞

DWR-M920 is a D-Link wireless router device used for cellular network access and wireless sharing. The D-Link DWR-M920 has a command injection vulnerability. This vulnerability arises due to the sub41C8E8 function in /boafrm/formSmsManage not performing secure filtering on the actionvalue...

PT-2026-46838

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub 41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument action value results in command injection. The attack is possible to be carried out remotely. The exploit is now public a...