CVE-2020-28148

CVE-2020-28148 A common way to attack WIFI, not only applicable to Xinrui a subsidiary of Sangfor WIFI products. Through multiple offensive and defensive engagements, it has been found that this exploitation method can bypass multiple AC vendors. This article is intended to disclose the...

pyrmax

pyrmax Decoder und Encoder für Ubiquiti-AirMAX-Wire-Protokoll-Frames, die sowohl die AC-Serie WA-Firmware als auch die M-Serie XW/XM-Firmware abdecken. Dekodierung der Klartext-äußeren Header erfolgt über Kaitai Struct-Schemata unter ksy/. Die AC-Nutzlast versionsabhängig, umgeschaltet über...

Malicious Package

Overview ac-polyfills is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-92287

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the ac init policy function within the init.c file allows for a permission bypass. This flaw enables local escalation of privilege without...

PT-2026-92285

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the ac init one sswrp function within the init.c file allows for a local escalation of privilege. This issue enables an attacker to gain System...

CVE-2026-80467

The Advanced Custom Fields: Extended WordPress plugin (versions 0.9.2.2 through 0.9.2.6 ) contains an unauthenticated privilege escalation vulnerability. The root cause is improper server-side validation and incomplete safeguards regarding the role field in front-end user forms. Specifically, the...

CVE-2026-82600: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of the argument ids results in sql injection. The attack can be initiated remotely. The exploit has been released to the...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +914 more potentially affected by CVE-2026-67323 via gitpython (>=0.3.4, <=3.1.50)

gitpython PYPI version =0.3.4, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-67323 Source advisory: MEND:CVE-2026-67323...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +914 more potentially affected by CVE-2026-67325 via gitpython (>=0.3.4, <=3.1.50)

gitpython PYPI version =0.3.4, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-67325 Source advisory: MEND:CVE-2026-67325...

CVE-2026-13308

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this...

CVE-2026-13308

CVE-2026-13308 affects Autel MaxiCharger AC Elite Home EV chargers. The flaw lies in the handling of WebSocket messages for the OCPP service, caused by insufficient validation of user-supplied data that can trigger an integer underflow before buffer allocation. This can allow an attacker to execu...

CVE-2026-13308 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this...

CVE-2026-13307

CVE-2026-13307 affects Autel MaxiCharger AC Elite Home EV chargers. The vulnerability is a heap-based buffer overflow in the handling of custom USB packets, caused by insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer. This can enable a physic...

CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...

CVE-2026-13309 Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to...

EUVD-2026-50558

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to...

CVE-2026-13305 Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers...

CVE-2026-13305: Improper Verification of Cryptographic Signature

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers...

CVE-2026-13308: Integer Underflow (Wrap or Wraparound)

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this...

CVE-2026-13306: Missing Authentication for Critical Function

Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The...