CVE-2025-50505

Clash Verge Rev (versions through 2.2.3 ) is vulnerable to Local Privilege Escalation (LPE) and Remote Code Execution (RCE) due to an unauthenticated HTTP API endpoint (/start_clash) in the clash-verge-service component. The service, which runs with elevated privileges (root or SYSTEM), allows at...

D-Link DAP-1360 Elevation of Privilege Vulnerability

The D-Link DAP-136 is a wireless network signal extender from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DAP-1360 all Fx hardware versions using firmware version v6.13EUb01 and earlier. An attacker could exploit the vulnerability to start a remote terminal protocol...

Siemens SIMATIC S7-300 PLC Privilege Bypass Vulnerability

The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller from Siemens for the manufacturing industry. The Siemens SIMATIC S7-300 PLC module is vulnerable to an unauthorized, execute CPU attack via privilege bypass. An attacker can construct special application layer data messages th...