EUVD-2026-66405

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device...

CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

CVE-2018-17873

CVE-2018-17873 I router indoor WiFiRanger Core, GoAC e i relativi router outdoor accoppiati Sky Pro, EliteAC, EliteAC FM con versione firmware 7.0.8rc3 o precedenti consentono accesso FTP anonimo in lettura/scrittura e lasciano la chiave privata SSH in chiaro, rendendo banale visualizzare/copiare...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof-of-Concept-Exploit für CVE-2026-20452, einen heap-basierten Pufferüberlauf im WLAN Access Point-Treiber von MediaTek. Sicherheitslücke CVE : CVE-2026-20452 CVSS : 8.0 HOCH CWE : CWE-122 — Heap-basierter Pufferüberlauf Subkomponente : wlan...

EUVD-2026-67295

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-77977

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2026-77977

Ebyte NE2-D11 is an industrial gateway whose vendor configuration utility lacks authentication before permitting disruptive administrative actions (reboot or factory reset) when default credentials remain configured. An unauthenticated attacker on the adjacent network can trigger these actions, c...

CVE-2026-77977 Ebyte NE2-D11 Missing Authentication for Critical Function

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 Framework di Sfruttamento Bluetooth RFCOMM "Heartbleed" Autore: Sastra Adi Wiguna Purple Elite Teaming Data: 20 gennaio 2026 Versione: 1.0 Replica dell'intero sistema Licenza: SOLO USO RED TEAM Non...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

EUVD-2026-66641

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-77532

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device...

CVE-2026-77532

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device...

CVE-2026-77532

A Buffer Overflow vulnerability in the DHCPv6 functionality of Ubiquiti EdgeMAX EdgeSwitch devices allows an unauthenticated actor on an adjacent network to achieve Remote Code Execution . The CNA-assigned CVSS 3.1 score is 9.6 (CRITICAL) , with low attack complexity, no required privileges or us...

PT-2026-82235

Name of the Vulnerable Software and Affected Versions TP-Link Kasa affected versions not specified Description Multiple smart home devices have insufficient cryptographic protections in the local device communication protocol. An attacker on the same network can intercept, replay, or forge locall...

CVE-2026-78915

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

CVE-2026-57909

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...

CVE-2026-57909 WatchGuard Agent path traversal allows unauthenticated remote code execution

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...

CVE-2026-57909 WatchGuard Agent path traversal allows unauthenticated remote code execution

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...