CVE-2026-120197

A flaw has been found in WAVLINK WL-WN530HG4B MV260724. This impacts the function portforward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vend...

CVE-2026-120195

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function setwzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlanssid leads to os command injection. The attack is...

CVE-2026-120196

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function portforward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

CVE-2026-120198 WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function concheckreadfinish of the file /protocol.csp. Such manipulation of the argument groupname/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

CVE-2026-120198 WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function concheckreadfinish of the file /protocol.csp. Such manipulation of the argument groupname/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

CVE-2026-120197 WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection

A flaw has been found in WAVLINK WL-WN530HG4B MV260724. This impacts the function portforward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vend...

CVE-2026-120197

A flaw has been found in WAVLINK WL-WN530HG4B MV260724. This impacts the function portforward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vend...

EUVD-2026-114751

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /appdata of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

EUVD-2026-114739

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-forms/form-components/DescriptionInput.tsx of the component Submission Description Editor. The manipulation results in cro...

EUVD-2026-114742

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrastdecodeframe that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8...

EUVD-2026-114743

FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled newpalette entries in cdxldecodeham8 or...

EUVD-2026-114738

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function saveuploadfile/mpuploadfile of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The...

CVE-2026-120196 WAVLINK WN579X3-D wapi.cgi port_forward os command injection

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function portforward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

CVE-2026-120196

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function portforward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was...

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

ReadyScript e-commerce management system File Upload

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

ReadyScript e-commerce management system File Upload

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

CRM Platform Path Traversal DoS

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and gain unauthorized access ...

NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...