CVE-2026-28312: Improper Authorization

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments...

CVE-2024-9050

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

CVE-2023-43478: Unrestricted Upload of File with Dangerous Type

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

PT-2022-15907

Name of the Vulnerable Software and Affected Versions NUUO NVRmini2 versions 3.11 and earlier Description The issue allows an unauthenticated attacker to upload an encrypted TAR archive. This can be abused to add arbitrary users due to the lack of authentication in handle import user.php. When...