W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

Joomla! Component Address Book 1.5.0 - Local File Inclusion

A directory traversal vulnerability in the AddressBook comaddressbook component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1471 info: name: Joomla! Component Address Book 1.5.0 - Local File Inclusion...

intercept

Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...

B-XSSRF

B-XSSRF Toolkit to detect and keep track on Blind XSS, XXE & SSRF SETUP Upload the files to your server. Create a Database and upload database.sql file to it. Change the DB Credentials in db.php file. Ready. USAGE BLIND XSS BLIND XXE %ext; SSRF GET /testssrf.php=http://mysite.com/bxssrf/request.p...

CVE-2026-120689

A flaw was found in HDF5. When traversing internal B-tree data structures, the library fails to properly validate child node relationships if a node is already loaded in the metadata cache. An attacker could exploit this vulnerability by enticing a user or application to open a specially crafted...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfsdirectpropagate after truncation Shuangpeng Bai reported that KASAN detected a slab-out-of-bounds error in nilfsdirectpropagate during testing. Analysis revealed that after truncating a file...

CVE-2026-120240

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed...

CVE-2026-120240 WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed...

CVE-2026-120240 WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed...

EUVD-2026-114882

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed...

CVE-2026-120240

The WAVLINK WN553X1-B router (version V260403_2.0.0 ) is vulnerable to an OS command injection vulnerability in the WireGuard CLI Group Handler component. The flaw exists within the sub_41A748 function of the /bin/ioos file, where an attacker can manipulate the group_id or group_name arguments. T...

CVE-2026-120238

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-120239

A vulnerability was found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument fileid results in os command injection. The attack is possible to be carried out...

CVE-2026-120239 WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection

A vulnerability was found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument fileid results in os command injection. The attack is possible to be carried out...

CVE-2026-120239 WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection

A vulnerability was found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument fileid results in os command injection. The attack is possible to be carried out...

CVE-2026-120239

A vulnerability exists in WAVLINK WN553X1-B V260403_2.0.0 affecting the WireGuard CLI Handler component. Specifically, the function sub_419DA8 within the file /bin/ioos fails to properly neutralize the file_id argument, leading to OS command injection . This flaw can be exploited remotely to exec...

EUVD-2026-114881

A vulnerability was found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument fileid results in os command injection. The attack is possible to be carried out...

CVE-2026-120238 WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-120238

A vulnerability exists in the WAVLINK WN553X1-B (version 260403_2.0.0) within the ovpn_file Handler. Specifically, the sub_4162A8 function in the /bin/ioos file is susceptible to os command injection due to the improper manipulation of the file_id argument. This flaw can be exploited remotely , p...

EUVD-2026-114880

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...