Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

CData Connect < 23.4.8846 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Connect 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31849 info: name: CData Connect 23.4.8846...

Zyxel - Authentication Bypass

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

TOTOLINK A3002RU 1.0.8 - Information Disclosure

TOTOLINK A3002RU firmware version 1.0.8 contains a vulnerability in which an unauthenticated attacker can obtain the plaintext admin password by making a GET request for password.htm. This allows remote attackers to gain administrative access without credentials. id: CVE-2018-13317 info: name:...

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA = 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands id: CVE-2026-28409 info: name: WeGIA = 3.6.4 - Remote Code Execution author:...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link ルーター OS コマンドインジェクション 詳細情報については https://vulners.com/cve/CVE-2026-3227 を参照 TP-Link ルーターファームウェアにおける持続的かつ認証済みの OS コマンドインジェクションの脆弱性。デバイスの文鎮化や潜在的な LAN 乗っ取りにつながる可能性があります。 免責事項 : このリポジトリには、パッチ適用済みの脆弱性に対する概念実証（PoC）コードが含まれています。教育目的およびセキュリティ研究者向けに提供されています。 エグゼクティブサマリー 複数の TP-Link...

CVE-2026-84884

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

EUVD-2026-87104

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

CVE-2026-96448

A flaw was found in the Fine-Grained Admin Permissions FGAP v2 feature of Keycloak, an identity and access management solution. The issue occurs when the system checks if a delegated administrator has permission to assign a specific role to a user. Because the check does not look inside composite...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

CVE-2025-8730

CVE-2025-8730 – Belkin F9K1009/F9K1010 인증 우회 작성자 : Byte Reaper 설명 : 이 저장소에는 Belkin F9K1009 및 F9K1010 라우터의 웹 인터페이스에 영향을 미치는 중요한 인증 우회 취약점인 CVE‑2025‑8730에 대한 익스플로잇이 포함되어 있습니다. 이 결함은 /login.htm 파일의 세션 검증 로직에 있으며, 부적절하게 처리된 쿠키나 조작된 요청을 통해 공격자가 유효한 자격 증명 없이 로그인 확인을 우회하고 관리자 인터페이스에 대한 전체 액세스 권한을 얻을 수...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2026-41940

CVE-2026-41940 — cPanel/WHM 認証バイパス 最近の脆弱性 CVE-2026-41940 は、cPanel/WHM を使用するサーバー管理者に大きな懸念をもたらしています。これは、有効な認証情報なしで管理パネルへの不正アクセスを可能にする、認証バイパスを許す可能性のある重大な欠陥です。 WHM が複数のサービスをホストするサーバーの主要な制御ポイントであることを考慮すると、この脆弱性は環境全体が完全に侵害される直接的なリスクを表します。 CVE-2026-41940 とは何か？ CVE-2026-41940 は、特定のバージョンの cPanel/WHM...

CVE-2026-56739

Logto versions prior to 1.43.0 are vulnerable to Server-Side Request Forgery (SSRF) because the application fails to validate outbound destinations controlled by administrators. Specifically, Webhook delivery in packages/core/src/libraries/hook/utils.ts can access cloud metadata addresses. Additi...

CVE-2026-82369

Brocade SANnav suffers from a vulnerability where insufficient input sanitization of shell metacharacters in the CLI scripting component allows authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can exploit this fl...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN 認証バイパス 📌 概要 CVE-2026-20127 は、Cisco Catalyst SD-WAN のコンポーネント（コントローラや管理システムを含む）に影響を与える重大な認証バイパス脆弱性です。 リモートの未認証攻撃者が、SD-WAN コントロールプレーンにおける認証検証の不備を悪用することで、ネットワークインフラストラクチャへの完全な管理者レベルのアクセスを獲得できます。 この問題は重大な深刻度（CVSS 10.0） と評価されており、実際の環境で活発に悪用されていることが確認されています。 ⚠️ 影響...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B バックドアエクスプロイト 概要 Auerswald COMpact 5500R 7.8A および 8.0B デバイスにおいて、Webベースの管理アプリケーションにアクセスできる攻撃者に対し、デバイスへの完全な管理者権限を許可するバックドアが発見されました。 製品詳細 製品: COMpact 3000 ISDN, COMpact 3000 analog, COMpact 3000 VoIP, COMpact 4000, COMpact 5000R, COMpact 5200R, COMpact 5500R,...

CVE-2026-94107: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substrmd5mtrand, 0, 10. Attackers who know an administrator's email address can request a password reset and predict the token to gain administrative...

EUVD-2026-83040

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of...