PT-2026-122148

An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1 FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters...

cve-2026-43512-poc

CVE-2026-43512 — Apache Tomcat DIGEST Authentication Bypass Exploitability analysis result: the root cause is confirmed. End-to-end exploitation is not reproducible against a standard UserDatabaseRealm deployment. See Analysis for details. Table of Contents Overview Affected Versions Root Cause...

dlink-dir-819-dos

CVE-2022-40946 Exploit: Unauthenticated Denial of Service in DLink consumer DIR 819 A1 routers Exploit Fetch the sources $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Run the exploit $ ./exploit.py -i 192.168.0.1 + DLink...

D-Link DIR-822 A1 strcpy Heap Buffer Overflow

The vulnerability of the strcpy function in the udhcpcd component of D-Link DIR-822 A1 wireless router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2026-50719

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

CVE-2026-50719: Improper Access Control

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

PT-2026-78354

Name of the Vulnerable Software and Affected Versions Ingenic T41 affected versions not specified Ingenic T32 affected versions not specified Ingenic T40 affected versions not specified Ingenic A1 affected versions not specified Description Boot ROMs in certain SoC System on Chip components parse...

EUVD-2026-45372

A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub42537C of the component Scheduler Name Handler. The manipulation of the argument a1 results in stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by...

CVE-2026-16097 Shibby Tomato Scheduler Name sub_42537C stack-based overflow

A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub42537C of the component Scheduler Name Handler. The manipulation of the argument a1 results in stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by...

PT-2026-60934

Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28 Description A stack-based buffer overflow exists in the Scheduler Name Handler component. The issue occurs within the sub 42537C function when the a1 argument is manipulated, allowing a remote authenticated attacker...

CVE-2026-36027: Hardware Allows Activation of Test or Debug Logic at Runtime

An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging ADB and Android Debug Bridge components...

PT-2026-53402

URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/http endpoints/http system.py" is subsequently passed to the "os.system" function in "cbpi/controller/system controller.py" without prior validation allowing arbitrary code execution. This issue affects CraftBeerPi ...

a1 (>=1.0.1, <=1.0.2), actor-kit (>=0.1.0, <=0.2.5) +112 more potentially affected by unknown CVE via rkyv (0.8.2)

rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =0.1.0-beta.2, =0.2.0 - fluxbench-logic 0.2.0 - fluxbench-report 0.2.0 and more Sour...

CVE-2026-42376

CVE-2026-42376 affects D-Link DIR-456U hardware revision A1 (End-of-Life). The description reports a hardcoded telnet backdoor: at boot a telnet daemon runs with username “Alphanetworks” and password read from /etc/config/image_sign; a -u user:password flag is accepted by the custom telnetd, and ...

D-Link DIR-605L Trust Management Vulnerability

The D-Link DIR-605L is a wireless router produced by D-Link Corporation. The D-Link DIR-605L in the Hardware Revision A1 version has a trust management vulnerability. This vulnerability stems from a hard-coded telnet backdoor, which allows unauthorized attackers on the local network to obtain roo...

CVE-2026-42376: Use of Hard-coded Credentials

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-42375: Use of Hard-coded Credentials

D-Link DIR-600L Hardware Revision A1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir600l" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

CVE-2026-42372: Use of Hard-coded Credentials

D-Link DIR-605L Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir605l" read from /etc/alphaconfig/imagesign. The custom telnetd binary...

udhcpd Code Execution

The vulnerability of the udhcpd microprogramming system in D-Link DIR-822 A1 routers is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CLSA-2026-1770213583 Update of microcode_ctl

Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000410; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000650; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...