D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection

OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. id: CVE-2023-25280 info: name: D-Link DIR820LA1FW105B03 'pingaddr' - OS Command Injection author: pussycat0x severity:...

root-my-webos-tv

Root my webOS TV A simple python script that starts a telnet server on vulnerable webOS devices as root. Verified TVs webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS 7.3.1-43 mullet-mebin -...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi non autenticato a Root RCE Gravità: Critico Tipo: SQL Injection non autenticata → Esecuzione remota di codice Software interessato: FreePBX modulo endpoint Testato su: FreePBX su CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Panoramica Esiste una vulnerabilità di SQL...

cve-2026-31431

CVE-2026-31431 Copy Fail Test Questo repository contiene un file di workflow per GitHub Actions per verificare se il runner delle azioni è affetto da CVE-2026-31431. Puoi eseguire il test da solo: basta creare un repository da questo template e attivare manualmente il workflow test.yml ricorda di...

GNU-Inetutils-telnet-CVE-2026-24061-

CVE-2026-24061 Strumento di rilevamento della vulnerabilità di bypass dell'autenticazione GNU Inetutils Telnetd 📋 Panoramica del progetto Questo è uno strumento di rilevamento avanzato per la vulnerabilità di bypass dell'autenticazione GNU Inetutils Telnetd CVE-2026-24061. La vulnerabilità ha un...

CVE-2025-20393

CVE-2025-20393 📌 Überblick CVE-2025-20393 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE , die Cisco Secure Email Gateway SEG - und Cisco Secure Email and Web Manager SEWM -Appliances betrifft, die Cisco AsyncOS ausführen. Die Schwachstelle existiert aufgrund unsachgemäßer...

EUVD-2026-64985

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...

SmmBackdoor

Backdoor SMM per piattaforme basate su UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Questo è un progetto legacy abbandonato, per la versione corrente della backdoor consulta la pagina del progetto SMM Backdoor Next Gen e la sua documentazione:...

CVE-2026-76156

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-76156 Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-18269

Kenwood DNR1007XR tchdrbytestreamread Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specif...

EUVD-2026-63420

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

EUVD-2026-63413

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

PT-2026-79033

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A time-of-check to time-of-use TOCTOU race condition exists, which could allow a local attacker to gain root privileges. A TOCTOU race condition occurs when a...

EUVD-2026-62514

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication...

PT-2026-78447

Name of the Vulnerable Software and Affected Versions Cudy WR3000 2.0 versions prior to 2.5.24 Description Authenticated attackers can execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT command interface. The sync command binary forwards this inp...

EUVD-2026-58802

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

CVE-2026-19908

CVE-2026-19908 affects the PAX Technology Q80 XCB Daemon. The flaw arises from a lack of authentication before accessing daemon functionality, allowing network-adjacent attackers to disclose sensitive information and modify configurations. The description also notes potential to execute arbitrary...

CVE-2026-19909 PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...