CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227：TP-Link 路由器操作系统命令注入 更多信息请参阅 https://vulners.com/cve/CVE-2026-3227 TP-Link 路由器固件中存在一个持久化的、经过身份验证的 OS 命令注入漏洞，可导致设备变砖或潜在的局域网接管。 免责声明 ：本仓库包含针对已修补漏洞的概念验证（PoC）代码。其仅用于教育目的和安全研究人员参考。 执行摘要 多款 TP-Link 路由器（包括 TL-WR802N、TL-WR841N 和 TL-WR840N）的配置备份/恢复机制中存在命令注入漏洞。拥有管理权限的攻击者可以下载路由器配置、对其进行解密、将恶意 OS...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

Zyxel - Authentication Bypass

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

CData Connect < 23.4.8846 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Connect 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31849 info: name: CData Connect 23.4.8846...

TOTOLINK A3002RU 1.0.8 - Information Disclosure

TOTOLINK A3002RU firmware version 1.0.8 contains a vulnerability in which an unauthenticated attacker can obtain the plaintext admin password by making a GET request for password.htm. This allows remote attackers to gain administrative access without credentials. id: CVE-2018-13317 info: name:...

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA = 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands id: CVE-2026-28409 info: name: WeGIA = 3.6.4 - Remote Code Execution author:...

CVE-2025-8730

CVE-2025-8730 – Belkin F9K1009/F9K1010 中的身份验证绕过 作者：Byte Reaper 描述： 此仓库包含一个针对 CVE‑2025‑8730 的漏洞利用代码，这是一个影响 Belkin F9K1009 和 F9K1010 路由器 Web 界面的严重身份验证绕过漏洞。 该漏洞存在于 /login.htm 文件的会话验证逻辑中，不当处理的 cookie 或精心构造的请求允许攻击者绕过登录检查，无需有效凭据即可完全访问管理界面。 此漏洞使远程攻击者（具有网络访问权限）能够： 访问敏感配置数据 修改路由器设置 部署进一步的有效载荷以实现持久化或横向移动...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2026-41940

CVE-2026-41940 A recente vulnerabilidade CVE-2026-41940 trouxe grande preocupação para administradores de servidores que utilizam cPanel/WHM. Trata-se de uma falha crítica que pode permitir o bypass de autenticação, possibilitando acesso indevido ao painel administrativo sem credenciais válidas...

CVE-2026-76431 Cisco Identity Services Engine Arbitrary File Deletion Vulnerability

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

CVE-2026-76423 Cisco ISE API Authentication Bypass Vulnerability

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit...

EUVD-2026-81107

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit...

CVE-2026-76423

CVE-2026-76423 affects the REST API web service in Cisco ISE and Cisco ISE-PIC , where insufficient authorization checks allow an unauthenticated remote attacker to gain administrative access by sending a crafted HTTP request to the exposed REST API port. A successful exploit permits the attacker...

CVE-2026-76703

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system...

CVE-2026-76673

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-91930

Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated users to supply arbitrary organization IDs. Attackers can add themselves as organization owners, create workspaces, and gain administrative access to victim...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN Authentication Bypass 📌 Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B バックドアエクスプロイト 概要 Auerswald COMpact 5500R 7.8A および 8.0B デバイスにおいて、Webベースの管理アプリケーションにアクセスできる攻撃者に対し、デバイスへの完全な管理者権限を許可するバックドアが発見されました。 製品詳細 製品: COMpact 3000 ISDN, COMpact 3000 analog, COMpact 3000 VoIP, COMpact 4000, COMpact 5000R, COMpact 5200R, COMpact 5500R,...