CVE-2026-82487

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-82486

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82539

A memory corruption vulnerability in the setMacFilterRules function of cstecgi.cgi (MAC Filtering component) in TOTOLINK A720R firmware 4.1.5cu.630_B20250509 allows a remote, authenticated attacker to corrupt memory by manipulating the desc argument. CVSS 3.1 scores the issue 9.1 (Critical) with ...

CVE-2026-82539 TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

EUVD-2026-68181

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

CVE-2026-82488

A stored cross-site scripting vulnerability in the Beetel 450TC3 router (firmware 01.00.00_01 ) is triggered by manipulating the Username argument in the User Management component. An attacker with low privileges and requiring user interaction can execute scripts in a victim's browser, leading to...

CVE-2026-82488 Beetel 450TC3 User Management cross site scripting

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

EUVD-2026-68180

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-82487 Beetel 450TC3 password recovery

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-82487

Beetel 450TC3 router (firmware 01.00.00_01 ) is affected by a weak password recovery vulnerability that enables authenticated privilege escalation . The attack is executable remotely with low privileges and no user interaction. The affected component is described as an unknown part in the provide...

EUVD-2026-68177

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX 대기 중: Flask-Uploads의 경로 순회 취약점 정보 제품 : Flask-Uploads 버전 : 0.2.1 및 이전 버전 가능 취약점 유형 : 경로 순회 디렉토리 순회 CWE-ID : CWE-22 심각도 : 높음 CVSS 7.5 영향 : 임의 파일 쓰기, 원격 코드 실행 RCE 설명 Flask-Uploads 0.2.1 버전에는 치명적인 경로 순회 취약점이 존재합니다. 이 라이브러리는 업로드된 파일의 파일명을 파일시스템에 저장하기 전에 제대로 검증새니타이즈하지 못합니다. 구체적으로,...

CVE-2026-Pending-Django-Summernote-RCE

CVE-2026-XXXXX Pending: django-summernote 임의 파일 업로드 RCE 이 저장소는 django-summernote 버전 0.8.20.0및 이전 버전에서 발견된 조건부 원격 코드 실행RCE 취약점에 대한 개념 증명PoC을 포함합니다. 취약점 상세 정보 제품 : django-summernote 버전 : = 0.8.20.0 유형 : 무제한 파일 업로드 CWE-434 심각도 : 높음 CVSS 7.2 영향 : 원격 코드 실행 RCE 설명 이 취약점은 setup.py의 엄격한 의존성 강제 부재와...

CVE-2026-Pending-Claude-Desktop-RCE

このリポジトリには README がありません。...

CVE-2026-82485

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-82484

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

EUVD-2026-68176

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The...

CVE-2026-82486

A vulnerability in SiteServer SSCMS 7.4.0 affects the Agent Installation Workflow component, where improper access controls are triggered by manipulating the SecurityKey argument. The attack is remotely exploitable but rated as high complexity and difficult to execute . CVSS 3.1 scores it 5.0 (Me...

CVE-2019-10068-PoC

Kentico CMS용 CVE-2019-10068 PoC CVE-2019-10068에 대한 개념 증명PoC 익스플로잇으로, Kentico CMS의 역직렬화 RCE를 악용하여 웹 셸을 업로드합니다. 법적 고지: 이 개념 증명 코드는 교육 및 허가된 보안 연구 목적으로만 제공됩니다. 작성자는 이 코드로 인한 오용이나 피해에 대해 책임을 지지 않습니다. 소유한 시스템 또는 명시적인 테스트 허가를 받은 시스템에서만 사용하고, 모든 관련 법률을 준수하십시오. 사용법 1. 스크립트의 9번 줄 에 대상 시스템의...