Lucene search
+L

17347 matches found

Cvelist
Cvelist
added 2026/01/23 2:58 a.m.41 views

CVE-2026-0783 ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS0.01538EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:58 a.m.32 views

CVE-2026-0783

CVE-2026-0783 affects ALGO 8180 IP Audio Alerter devices, targeting the web UI. The flaw is insufficient validation of a user-supplied string used in a system call, enabling an attacker to achieve remote code execution within the device context. Reported as a Web UI command injection with authent...

8.8CVSS6.5AI score0.01538EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:58 a.m.12 views

CVE-2026-0782

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.3AI score0.01538EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/01/23 2:58 a.m.56 views

CVE-2026-0782

CVE-2026-0782 affects ALGO 8180 IP Audio Alerter, Web UI. Root cause: insufficient validation of a user-supplied string before it is used in a system call, enabling remote code execution in the device context. Exploitation requires authentication; confirmed in ZDI advisory ZDI-26-004 and related ...

8.8CVSS6.5AI score0.01538EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:57 a.m.9 views

CVE-2026-0780

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.3AI score0.01555EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 2:57 a.m.18 views

CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

7.2CVSS6.5AI score0.01555EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:57 a.m.42 views

CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

7.2CVSS0.01555EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:57 a.m.6 views

CVE-2026-0779

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

7.2CVSS6.3AI score0.01555EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/01/23 2:57 a.m.32 views

CVE-2026-0779

The CVE-2026-0779 vulnerability affects ALGO 8180 IP Audio Alerter devices. It stems from the web UI’s improper validation of a user-supplied string used to execute a system call, enabling remote code execution in the device context. Exploitation requires authentication and is possible over the n...

8.8CVSS6.5AI score0.01555EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/01/23 12:31 a.m.2 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the web interface when canceling scheduled auto-merges. An attacker can terminate auto-merges scheduled by other users by leveraging read access to pull requests. Remediation Upgrade...

5.3CVSS5.9AI score0.00309EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/01/23 12:31 a.m.1 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the web interface when canceling scheduled auto-merges. An attacker can terminate auto-merges scheduled by other users by leveraging read access to pull requests. Remediation Upgrade...

5.3CVSS5.9AI score0.00309EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 12:31 a.m.9 views

EUVD-2026-4265

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface...

4.3CVSS5.4AI score0.00309EPSS
SaveExploits0References6
OSV
OSV
added 2026/01/23 12:31 a.m.7 views

GHSA-9CGQ-WP42-4RPQ Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able to cancel auto-merges scheduled by other users...

5.3CVSS5.5AI score0.00309EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/01/23 12:31 a.m.13 views

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able to cancel auto-merges scheduled by other users...

4.3CVSS5.4AI score0.00309EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.17 views

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

8.8CVSS7.3AI score0.01538EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.20 views

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

8.8CVSS7.3AI score0.01538EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.16 views

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

8.8CVSS7.3AI score0.01538EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.12 views

ALGO 8180 IP Audio Alerter security vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a security vulnerability; this vulnerability stems from the web-based user interface, which allows direct requests for URLs, potentially leading to information leakage...

7.5CVSS6AI score0.00685EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.14 views

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

8.8CVSS7.3AI score0.01538EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.12 views

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

8.8CVSS7.4AI score0.01555EPSS
SaveExploits0References1
Rows per page
Query Builder