CVE-2026-2926 D-Link DWR-M960 LTE Configuration Endpoint formLteSetup sub_4237AC stack-based overflow

A flaw has been found in D-Link DWR-M960 1.01.07. This affects the function sub4237AC of the file /boafrm/formLteSetup of the component LTE Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

whatismyudid 跨站脚本漏洞

whatismyudid is a Node.js application by the individual developer of chedabob. It displays the UDID of an iOS device via Mobile Config. Whatismyudid has a security vulnerability in the exports.enrollment function in the file routes/mobileconfig.js, which can be manipulated to cause cross-site...

Information disclosure

The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled mobile-configuration profiles, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging access to an unintended proxy server...