CVE-2026-16850

IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, are vulnerable to command injection via crafted Router Advertisements, enabling remote arbitrary code execution with HIGH severity (CVSS 8.8). Exploitation details are not provided in the documents; refer to the IBM support advisory for patch information.

EUVD-2026-62745

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

CVE-2026-16850 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

CVE-2026-16850 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

Huawei Router HG532 RCE

Module exploits remote command execution in Huawei Router HG532 devices. If the target is vulnerable, command loop is invoked that allows executing commands on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """Huawei Router HG532 RCE""" from kittysploit import from...

ZTE ZXV10 RCE

Exploits ZTE ZXV10 H108L remote code execution vulnerability that allows executing commands on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """ZTE ZXV10 RCE""" import re import time from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

D-Link DIR-825 Path Traversal

Module exploits D-Link DIR-825 path traversal vulnerability, which allows reading files from the device. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-825 Path Traversal""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary,...

Asus RT-N16 Password Disclosure

Module exploits password disclosure vulnerability in Asus RT-N16 devices that allows to fetch credentials for the device. !/usr/bin/env python3 -- coding: utf-8 -- """Asus RT-N16 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

D-Link DWR-932 Info Disclosure

Module explois information disclosure vulnerability in D-Link DWR-932 devices. It is possible to retrieve sensitive information such as credentials. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DWR-932 Info Disclosure""" import json import re from kittysploit import from...

CVE-2026-75985

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-75985 TRENDnet Router ping.cgi command injection

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-75985 TRENDnet Router ping.cgi command injection

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-75985

TRENDnet Router firmware 1.1.02b01 is vulnerable to command injection in /cgi-bin/ping.cgi via the wan_type parameter, exploitable remotely. A proof-of-concept exploit is published on GitHub. CVSS 3.1 rates this HIGH (7.4). No patch version is mentioned in the provided documents. Exploitation sta...

EUVD-2026-62217

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

PT-2026-78611

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A command injection flaw exists that allows a remote attacker to execute arbitrary code by sending specially crafted Router Advertisements. Router Advertisements are ICMPv6...

CVE-2026-16850: Improper Privilege Management

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

PT-2026-78257

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wan type causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

Linux Distros Unpatched Vulnerability : CVE-2026-18697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting...

CVE-2026-75985: Improper Neutralization of Special Elements used in a Command

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wantype causes command injection. The attack may be initiated remotely. The exploit has been published and may be used...

DD-WRT UPnP DoS

The vulnerability of the UPnP microprogramming software for routers with DD-WRT is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests through the UDP port...