sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

St. Joe ERP system - SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

st

ST Smart Things ST Smart Things Sentinel es una herramienta de seguridad avanzada diseñada específicamente para examinar y detectar amenazas dentro de los intrincados protocolos utilizados por los dispositivos IoT Internet de las cosas. En el panorama en constante expansión de los dispositivos...

RUSTSEC-2026-0335 Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

mykey implements MIKEY RFC 3830 for SRTP key exchange. Pre-shared key mode transmitted the TEK Generation Key TGK in the clear. MikeyMessage::newpskinit built its KEMAC payload with EncAlg::Null and placed the TGK in encdata verbatim. Anyone able to read a PSK-Init message therefore recovers the...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfc: st-nci: Fixed a use-after-free bug in ndlcremove due to a race condition This bug affects both stncii2cremove and stncispiremove. Take stncii2cremove as an example. In stncii2cprobe, it calls ndlcprobe and binds &ndlc-smwork...

Unidentified Flock Cameras in Florida

St. Lucie County in Florida discovered alt link a dozen Flock cameras whose ownership it can't identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My gue...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via a drive designator URI in TemplateLookup.gettemplate on Windows. The directory traversal check in Template.init normalizes the URI using os.path which on Windows is ntpath, while TemplateLookup.gettemplate resolv...

ROS-20260930-73-0051

The vulnerability of the phy/st/phy-stm32-usbphyc.c component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-94214

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94216 ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

CVE-2026-94216

An open redirect vulnerability affects ST Engineering iDirect Evolution and Velocity WebServer Evolution (up to build 20260717). The flaw resides in the authorize function of the file /usr/sbin/webserver, specifically in the HTTP Header Handler component. Manipulating the Success argument allows ...

CVE-2026-94216 ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

EUVD-2026-83907

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

CVE-2026-94214 ST Engineering iDirect iDX/Evo iDX Location Header redirect

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

EUVD-2026-83902

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

CVE-2026-94214

ST Engineering iDirect Evolution and Velocity WebServer Evolution (versions up to 20260717 ) contain an open redirect vulnerability in the Management Service component, specifically in the /login.html file. The root cause is unsanitized manipulation of the Host argument, allowing a remote attacke...

CVE-2026-94214 ST Engineering iDirect iDX/Evo iDX Location Header redirect

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94216: Improper Neutralization of CRLF Sequences in HTTP Headers

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is...

CVE-2026-94214: URL Redirection to Untrusted Site

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack...

PT-2026-96089

Name of the Vulnerable Software and Affected Versions ST Engineering iDirect Evolution versions prior to 20260717 Velocity WebServer Evolution versions prior to 20260717 Description An open redirect issue exists in the Management Service component within the /login.html file. A remote attacker ca...