glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...

axiom

ADVERTENCIA : Axiom Classic ahora está en modo de mantenimiento. Te animamos a migrar al nuevo Ax Framework. En los próximos meses, introduciremos actualizaciones esenciales de calidad de vida a Axiom Classic antes de 2025. ¡Larga vida a Axiom! Axiom es un marco de infraestructura dinámico para...

apthesaurus (22.2.1), ax (0.3.0) +2 more potentially affected by CVE-2026-85078 via sanic (21.12.1)

sanic PYPI version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apthesaurus 22.2.1 - ax 0.3.0 - python-signal-cli-rest-api =22.1.1rc1, =22.1.22.1, =22.2.3 Source cves: CVE-2026-85078 Source advisory:...

aiocqhttp-sanic (>=1.2.3a1, <=1.2.3), ax (>=0.39.0, <=0.42.0) +11 more potentially affected by CVE-2026-85078 via sanic (19.3.1)

sanic PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aiocqhttp-sanic =1.2.3a1, =0.39.0, =1.4.2rc1, =1.0.0rc1, =0.1.0a1, =0.3.0, =0.1.0, =0.3.0, =0.7.0 Source cves: CVE-2026-85078 Source advisory:...

aiocqhttp-sanic (>=1.2.3a1, <=1.2.3), ax (>=0.39.0, <=0.42.0) +11 more potentially affected by CVE-2026-85078 via sanic (19.3.1)

sanic PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - aiocqhttp-sanic =1.2.3a1, =0.39.0, =1.4.2rc1, =1.0.0rc1, =0.1.0a1, =0.3.0, =0.1.0, =0.3.0, =0.7.0 Source cves: CVE-2026-85078 Source advisory:...

apthesaurus (22.2.1), ax (0.3.0) +2 more potentially affected by CVE-2026-85078 via sanic (21.12.1)

sanic PYPI version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - apthesaurus 22.2.1 - ax 0.3.0 - python-signal-cli-rest-api =22.1.1rc1, =22.1.22.1, =22.2.3 Source cves: CVE-2026-85078 Source advisory:...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-55558 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-55558 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

Linux kernel ax25_release ax25_bind Data Compromise

The vulnerability of the ax25release and ax25bind functions in the net/ax25/afax25.c module, which implements networking functions in the Linux kernel, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100358 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-12481 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-12481 Source...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-12482 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-12482 Source...

adpred (>=1.2.8, <=1.2.9), ax-env (>=0.2.2, <=0.2.4) +24 more potentially affected by CVE-2026-9335 via keras (2.8.0)

keras PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - adpred =1.2.8, =0.2.2, =0.1.14, =1.1.9, =1.0.0, =1.1.1 - keras-flower 0.3.0 - napari-deepfinder 0.0.1 and more Source cves: CVE-2026-9335 Source...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +34 more potentially affected by CVE-2026-37737 via sanic-cors (>=2.0.0, <=2.2.0)

sanic-cors PYPI version =2.0.0, =1.1.0, =1.1.0, =0.0.3, =0.0.1, =1.0.1, =0.0.5, =0.0.1, =0.1.4, =0.0.1, =0.0.1, =0.0.47, =0.10.24 and more Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2026-37737 via sanic-cors (0.9.9.post3)

sanic-cors PYPI version 0.9.9.post3 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - ax =0.43.0, =0.0.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

ax (>=0.39.0, <=0.42.0), pre-assistant (>=0.23.5, <=0.23.16) +4 more potentially affected by CVE-2026-37737 via sanic-cors (0.9.9.post1)

sanic-cors PYPI version 0.9.9.post1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic-cors and may be impacted: - ax =0.39.0, =0.23.5, =1.4.0, =2.6.1, =1.5.0, =0.0.2, =0.0.4 Source cves: CVE-2026-37737 Source advisory: OSV:PYSEC-2026-3539...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...