44547 matches found
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761
CVE-2026-76761 is an OS command injection vulnerability in chenhg5 cc-connect (up to version 1.4.1). The flaw resides in the shellExecCommand function within core/engine.go , part of the Management API component. An attacker can remotely manipulate the exec argument to inject and execute arbitrar...
CVE-2026-76760 chenhg5 cc-connect webhook.go authenticate code injection
A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and coul...
CVE-2026-76760 chenhg5 cc-connect webhook.go authenticate code injection
A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and coul...
CVE-2026-76590
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
CVE-2026-76591
The TRENDnet TEW-755AP's log_email_server function in /cgi-bin/email.cgi (ssi component) is vulnerable to remote command injection. CVSS 3.1 scores it HIGH (7.4); a public PoC exploit exists at https://github.com/meishigana/CVE/tree/main/team15_20260702/14_755ap-ssi-cmdi. No patch version or vend...
CVE-2026-76591 TRENDnet TEW-755AP ssi email.cgi log_email_server command injection
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
CVE-2026-76589
A stack-based buffer overflow in the FUN_401000 function of /sbin/mycli on TRENDnet TEW-755AP firmware up to 20260702 allows remote attackers to crash or take over the device by sending a crafted ssid argument. A proof-of-concept exploit exists at https://github.com/meishigana/CVE/blob/main/team1...
CVE-2026-76584
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-76583
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-76576
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...
CVE-2026-76584
A stack-based buffer overflow exists in the alphapd component of the TRENDnet TV-IP751WIC network camera (firmware 11.03.03), specifically in the file /cgi-bin/admin/set_time.cgi. The vulnerability is triggered by manipulating the Currenttime argument and can be exploited remotely with low privil...
CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-76583
TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.
CVE-2026-76582
TRENDnet TEW-821DAP firmware 2.2.01b05 passes the unsanitized ipaddr argument from /cgi-bin/ping.cgi to popen/system in the ssi component, enabling remote command injection; a proof-of-concept exploit is publicly available on GitHub. No patch or workaround is mentioned in the provided documents.
EUVD-2026-62852
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2026-17106 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, buildkitd, ctop-fips, falcoctl, kaniko-fips, skaffold-fips, telegraf, docker-cli-buildx, openbao, buildah-fips, falcoctl-fips, skaffold, podman, buildah, kubescape, kubescape-server-fips, kaniko, docker-fips, kubescape-server, podman-fips,...