Lucene search
+L

289274 matches found

Positive Technologies
Positive Technologies
added yesterday6 views

PT-2026-73433

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...

8CVSS5.5AI score0.00276EPSS
SaveExploits0References5
OSV
OSV
added yesterday5 views

UBUNTU-CVE-2026-74270

In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the handshake genl family, both intended for use by the trusted handshake agent tlshd. ACCEPT already requires GENLADMINPERM; DONE has ...

7.8CVSS5.5AI score0.00128EPSS
SaveExploits0References8
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-74391

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

5.4AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-72486

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

5.5AI score0.0018EPSS
SaveExploits0References9
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-72335

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hciaddadvmonitor publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The MSFT offload add path can then fail either locally before the...

7.8CVSS5.7AI score0.00171EPSS
SaveExploits0References9
OSV
OSV
added yesterday5 views

UBUNTU-CVE-2026-72135

In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface, but their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command leaves a response pendin...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References11
OSV
OSV
added yesterday4 views

UBUNTU-CVE-2026-72130

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default states, th...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits0References7
OSV
OSV
added yesterday6 views

UBUNTU-CVE-2026-72410

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...

7.8CVSS5.3AI score0.00163EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2 days ago3 views

CVE-2026-19963

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2 days ago14 views

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS0.01158EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2 days ago5 views

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago29 views

CVE-2026-19963

The CVE-2026-19963 affects Edimax EW-7478APC 1.04. The vulnerability is in the stainfo function of /goform/stainfo, where manipulation of the interface argument leads to a remote command injection. Public exploit availability and disclosure indicate potential active abuse; the vendor was contacte...

7.4CVSS7.2AI score0.01158EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago6 views

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS0.01158EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago13 views

CVE-2026-19962 Edimax EW-7478APC setWAN command injection

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

7.4CVSS0.01158EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-19962

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

7.4CVSS7.2AI score0.01158EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2 days ago24 views

CVE-2026-19962

Edimax EW-7478APC (firmware 1.04) contains a flaw in the setWAN function (/goform/setWAN). Remote attacker can inject commands by manipulating pppUserName, pptpUserName, or L2TPUserName, enabling command execution. The exploit has been published and is usable; vendor was contacted but did not res...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5
CVE
CVE
added 2 days ago24 views

CVE-2026-19960

CVE-2026-19960 affects Edimax EW-7478APC, firmware 1.04. The issue lies in the formWlbasic handler in /goform/formWlbasic, where manipulation of the rootAPmac argument enables command injection. This can be triggered remotely and the exploit has been publicly disclosed. No remediation details are...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago26 views

CVE-2026-19960 Edimax EW-7478APC formWlbasic command injection

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS0.01158EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago3 views

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS7.1AI score0.01158EPSS
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
added 2 days ago19 views

Exploit for CVE-2026-18366

CVE-2026-18366 Events Manager 7.4.1 - Unauthenticated Pri...

9.8CVSS5.7AI score0.00303EPSS
SaveExploits1
Rows per page
Query Builder