50 matches found
CVE-2026-75616
CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...
Malicious code in @bpa-internal/bpa-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15679 Malicious code in @bpa-internal/bpa-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15678 Malicious code in @bpa-internal/bpa-types (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-types (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15677 Malicious code in @bpa-internal/bpa-common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-auth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15676 Malicious code in @bpa-internal/bpa-auth (npm)
--- -= Per source details. Do not edit below this line.=-...
Exploit for CVE-2026-75616
CVE-2026-75616 Authenticated OS command injection in the TP-L...
CVE-2026-11410: Improper Neutralization of Special Elements used in an OS Command
An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...
CVE-2026-11410
The CVE-2026-11410 entry concerns TL-WR940N v6 (BigPond Cable BPA WAN config) with an authenticated OS command injection caused by improper input sanitization in the configuration module. An administrator can trigger arbitrary command execution with elevated privileges on the device via the BPA W...
EUVD-2021-7043
Malicious code in bioql PyPI...
CVE-2024-50996
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpaserver parameter at geniebpa.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
Netgear genie_bpa.cgi DoS
The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...
CVE-2024-50996
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpaserver parameter at geniebpa.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
PT-2024-8363 · NetGear · Netgear Xr300 +3
Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128 Description: The issue is related to a stack overflow vulnerability in the genie bpa.cgi script, specifically v...
Update Rollup 3 for Windows Server Solutions Best Practices Analyzer 1.0 is available
Update Rollup 3 for Windows Server Solutions Best Practices Analyzer 1.0 is available Applies To Windows Small Business Server 2011 Essentials Windows Small Business Server 2011 Standard Windows MultiPoint Server 2011 Standard Windows MultiPoint Server 2011 Premium Windows Storage Server 2008 R2...
Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available
Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available Applies To Windows Small Business Server 2011 Essentials Windows Small Business Server 2011 Standard Windows MultiPoint Server 2011 Premium Windows MultiPoint Server 2011 Standard Windows Storage Server 2008 R2...