EUVD-2026-67937

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by...

EUVD-2026-68007

Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain port-forwarding rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68006

Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain cloud firmware check status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67933

An unauthenticated party able to reach the port of a MongoDB Connector for BI mongosqld instance may generate enough routine connection log activity to exhaust the storage backing the configured log path. When a log write or log rotation operation subsequently fails, the resulting error is not...

EUVD-2026-67939

A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop had no overall time bound and the read from the client ha...

EUVD-2026-68008

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67950

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert ARE for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticate...

EUVD-2026-66422

RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before receiving the payload. A crafted header can request up...

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Iniezione di comandi del sistema operativo non autenticata /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 Scopritore : Daniil Gordeev Divulgato : 2026-05-03 Riepilogo Il server web GoAhead incluso nei dispositivi CPE 4G LTE...

PT-2026-83455

Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attackers to bypass IP validation. Attackers can make the server request internal hosts in that range including cloud metadata services and read...

PT-2026-83497

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg select user role value from the unauthenticated WooCommerce Store API...

Linux Distros Unpatched Vulnerability : CVE-2026-55584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSIALLOWED access-control check in readconfig.php trusts...

VulnCheck KEV: CVE-2026-0768

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code...

PT-2026-83394

Name of the Vulnerable Software and Affected Versions Uix UserCenter versions prior to 1.0.4 Description The Uix UserCenter WordPress plugin fails to verify if the account being modified during an unauthenticated profile-update action belongs to the requester. The process uses a token for...

PT-2026-83431

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected...

PT-2026-83427

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...

lab-cve-2025-57819

Lavori in corso FreePBX CVE-2025-57819 Lab - SQLi non autenticata → Catena RCE Nuclei POC Avvia un laboratorio FreePBX 15 riproducibile Docker per validare CVE-2025-57819 — una critica SQL injection non autenticata negli endpoint AJAX di userman che può essere concatenata per ottenere RCE. Includ...

CVE-2025-55182

Vulnerabilità React2Shell - CVE-2025-55182 📓 Introduzione Questa vulnerabilità, conosciuta come React2Shell, è stata scoperta a dicembre 2025 e interessa componenti di next.js con CVSS 10.0. Con una semplice richiesta POST, è possibile ottenere una grave RCE non autenticata. Di seguito sono...

CVE-2025-32463

🚨 CVE-2025-32463 — “Chwoot” Kritische lokale Privilegienausweitung im am weitesten verbreiteten Linux-Privilegienmanager Jeder lokale Benutzer auch ohne sudoers-Berechtigungen könnte in Sekunden Root werden, indem ersudo -R verwendet ⚠️ Überblick CVE-2025-32463 auch bekannt als „chroot-to-root “...