CVE-2026-16279

creationtimestamp| type| source ---|---|--- 2026-08-28 07:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4ubs6ipz2t...

WordPress Tutor LMS plugin <= 4.0.5 - Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability

Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability discovered by Slopothecary in WordPress Plugin Tutor LMS versions = 4.0.5...

CVE-2026-75813

creationtimestamp| type| source ---|---|--- 2026-08-28 07:04:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4sbgeyua2r...

CVE-2026-82090

creationtimestamp| type| source ---|---|--- 2026-08-28 06:08:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e 2026-08-28 06:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3 2026-08-29 01:10:05+00:00| seen|...

CVE-2026-19318

creationtimestamp| type| source ---|---|--- 2026-08-28 04:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4igxmfmf2p 2026-08-29 17:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muaelxz5dm2j 2026-09-26 03:46:54+00:00| seen|...

CVE-2026-13086

creationtimestamp| type| source ---|---|--- 2026-08-28 04:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4ig6vcwt2b 2026-08-29 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muabaon2662b...

CVE-2026-19313

creationtimestamp| type| source ---|---|--- 2026-08-28 03:37:17+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mu4gpnimwu2u 2026-08-28 04:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4iggj5as2m 2026-08-28 05:05:10+00:00| seen|...

CVE-2026-38822

creationtimestamp| type| source ---|---|--- 2026-08-28 03:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4epmhanx27...

CVE-2026-68929

creationtimestamp| type| source ---|---|--- 2026-08-28 02:07:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bptiki62b...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...

CVE-2026-51640

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to incorrect access control in the getMeshNeighborTable function. This flaw allows unauthenticated attackers to obtain sensitive mesh neighbor information by sending a crafted POST request to the /cgi-bin/cstec...

CVE-2026-51639

Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51630

Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS configuration, including domain, username, and password, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51619

Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain online client information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51637

Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh portal table information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67876

Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51646

Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83204

Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83176

Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to arbitrarily force an immediate reboot via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83208

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...