CVE-2026-75616

CVE-2026-75616 Injeção autenticada de comandos no sistema operacional na interface de gerenciamento web do TP-Link Archer C20 v6. Os valores de configuração BPA WAN são passados para system sem neutralização adequada, permitindo que um administrador autenticado na rede adjacente execute comandos...

Malicious code in @bpa-internal/bpa-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15679 Malicious code in @bpa-internal/bpa-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-types (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15677 Malicious code in @bpa-internal/bpa-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15678 Malicious code in @bpa-internal/bpa-types (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-auth (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15676 Malicious code in @bpa-internal/bpa-auth (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-L...

CVE-2026-11410: Improper Neutralization of Special Elements used in an OS Command

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410

The CVE-2026-11410 entry concerns TL-WR940N v6 (BigPond Cable BPA WAN config) with an authenticated OS command injection caused by improper input sanitization in the configuration module. An administrator can trigger arbitrary command execution with elevated privileges on the device via the BPA W...

EUVD-2021-7043

Malicious code in bioql PyPI...

CVE-2024-50996

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpaserver parameter at geniebpa.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

The vulnerability in the genie_bpa.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...

CVE-2024-50996

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpaserver parameter at geniebpa.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-8363 · NetGear · Netgear Xr300 +3

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to a stack overflow vulnerability in the genie bpa.cgi script, specifically v...

Malicious code in bpa-trello-dashboard (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1837 Malicious code in bpa-trello-dashboard (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in odesk.bpa-tsf-calc-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 913d44e6393e1a341f574267f3a31fb22effca6602c910ed05a2274faf14437a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...