1187 matches found
EUVD-2026-95404
An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. Successful...
EUVD-2026-95405
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...
EUVD-2026-95406
TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...
CVE-2018-17873
CVE-2018-17873 أجهزة التوجيه الداخلية من WiFiRanger Core، GoAC وأجهزة التوجيه الخارجية المقترنة بها Sky Pro، EliteAC، EliteAC FM التي تعمل بإصدار البرنامج الثابت 7.0.8rc3 وإصدارات أقدم تسمح بالوصول المجهول للقراءة/الكتابة عبر FTP وتترك المفتاح الخاص SSH مكشوفًا — مما يجعل من السهل جدًا عرض/نسخ...
CVE-2026-105672
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...
CVE-2026-105673
An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. Successful...
CVE-2026-105674
TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...
CVE-2026-105674
The TP-Link Tapo C325WB V2 is vulnerable to a predictable media stream pre-shared key generation. The device uses a time-seeded pseudo-random number generator to create keys for its local media streaming service, allowing an unauthenticated attacker on the adjacent network to recover the key. Suc...
CVE-2026-105672
The TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability within the HTTPS JSON API dispatcher on TCP port 443. An attacker located on the adjacent network can exploit this by appending an onboarding-scoped object to a JSON request, effectively bypassing session ve...
CVE-2026-105673 Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB
An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. Successful...
CVE-2026-105673
A denial-of-service vulnerability exists in the TP-Link Tapo C325WB v2 within the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. The root cause is memory corruption triggered by a crafted pair of RTSP-over-HTTP tunneling requests , which can crash the streaming...
CVE-2026-47858
CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...
CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices
= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: إطار استغلال ثغرة "Heartbleed" لبلوتوث RFCOMM CVE-2025-13834 المؤلف: Sastra Adi Wiguna فريق Purple Elite Teaming التاريخ: 20 يناير 2026 الإصدار: 1.0 نسخة كاملة للنظام الترخيص: للاستخدام من قبل الفريق الأحمر فقط لا توزع د...
DEBIAN-CVE-2026-106570
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
CVE-2026-106570
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
EUVD-2026-94389
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
CVE-2026-106570
The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) condition in its distributed pixel cache server . An unauthenticated client on an adjacent network can exhaust the server's available connections by repeatedly connecting to it. This issue is characterized by u...
CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...
PT-2026-107553
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description An unauthenticated adjacent-network client can cause a denial of service by repeatedly connecting to the distributed pixel cache server, which exhausts the available connections. Recommendatio...
Linux Distros Unpatched Vulnerability : CVE-2026-106570
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can...