Exploit for CVE-2026-64560

OPPO Find X10 Pro Max PMX110 / OP659FL1 · CVE-2026-64560 Res...

CVE-2026-93289 OS command injection in Eufy Omni C20, Omni X10 Pro

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...

CVE-2026-93289 OS command injection in Eufy Omni C20, Omni X10 Pro

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...

CVE-2026-93289

The Eufy Omni C20 and Omni X10 Pro are vulnerable to an OS command injection attack. This vulnerability allows an unauthenticated attacker to execute arbitrary system commands during the pairing process . While the specific root cause is not detailed in the provided documents, the impact is signi...

Eufy Omni C20, Omni X10 Pro (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

DEBIAN-CVE-2026-54692

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

CVE-2026-54692 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

PT-2026-95078

Name of the Vulnerable Software and Affected Versions SAIL versions prior to 1.0.0 Description A heap overwrite occurs in the sail codec load frame v8 xbm function within src/sail-codecs/xbm/xbm.c when processing X10 static short files. The issue arises because the decoded pixel buffer is allocat...

CVE-2019-12510

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API "/soap/serversa" by supplying a malicious X-Forwarded-For header of the device's LAN IP address 192.168.1.1 in every request. As a result, an attacker may...

EUVD-2009-4693

Malware in sbrugna...

EUVD-2009-3136

Malware in sbrugna...

EUVD-2019-4107

Malware in sbrugna...

EUVD-2009-4694

Malware in sbrugna...

CVE-2025-45986

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 werediscovered to contain a command injection vulnerability via the mac parameter in the bsSetMacBlack function...

CVE-2019-12513

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious...

bitcoinlib (>=0.5.1, <=0.6.3), empiric-network (>=0.7.3, <=1.3.1) +6 more potentially affected by CVE-2024-21502 via fastecdsa (>=2.0.0, <=2.3.0)

fastecdsa PYPI version =2.0.0, =0.5.1, =0.7.3, =3.3.0, =1.0.1, =1.0.0, =0.1.0, =0.4.3 - xchainpy-bitcoin 0.1.2 Source cves: CVE-2024-21502 Source advisory: OSV:GHSA-PH86-G9R3-5QW4...

bitcoinlib (>=0.5.1, <=0.6.3), empiric-network (>=0.7.3, <=1.3.1) +6 more potentially affected by CVE-2024-21502 via fastecdsa (>=2.0.0, <=2.3.0)

fastecdsa PYPI version =2.0.0, =0.5.1, =0.7.3, =3.3.0, =1.0.1, =1.0.0, =0.1.0, =0.4.3 - xchainpy-bitcoin 0.1.2 Source cves: CVE-2024-21502 Source advisory: SNYK:PYTHON-FASTECDSA-6262045...

Security Bulletin: This Power System update is being released to address CVE-2018-13787

Summary POWER8/POWER9: In response to a potential issue with validation checking of IBM firmware, a new firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-13787. Vulnerability Details CVEID: CVE-2018-13787 DESCRIPTION: Certain Supermicro X11S,...