Lucene search
+L

31756 matches found

GithubExploit
GithubExploit
added 2026/01/30 3:25 a.m.220 views

mtkclient

🚀 mtkclient - Easily Flash and Repair Mediatek Devices !Dow...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/30 3:24 a.m.39 views

CVE-2025-53869

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates...

6.3CVSS5.9AI score0.00143EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/30 3:24 a.m.13 views

CVE-2026-1544

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub41E2A0 of the file /goform/setmode. Performing a manipulation of the argument langateway results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to...

8.8CVSS5.7AI score0.03406EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/01/30 12:00 a.m.23 views

PT-2026-5376

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description Certain end-of-service NETGEAR products feature a “TelnetEnable” functionality. This functionality permits a magic packet to activate the telnet service on the device, potentially leading to...

8.7CVSS7.1AI score0.00217EPSS
SaveExploits0References6
Ubuntu
Ubuntu
added 2026/01/29 10:31 p.m.13 views

USN-7986-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ceph distributed file system; - JFFS2 file system; - Timer subsystem; - USB sound devices; CVE-2024-26689,...

8.8CVSS7.2AI score0.03558EPSS
SaveExploits8
OSV
OSV
added 2026/01/29 10:31 p.m.15 views

USN-7986-1 linux vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ceph distributed file system; - JFFS2 file system; - Timer subsystem; - USB sound devices; CVE-2024-26689,...

8.8CVSS6.7AI score0.03558EPSS
SaveExploits8References5
RedhatCVE
RedhatCVE
added 2026/01/29 9:21 p.m.11 views

CVE-2026-1532

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

5.5CVSS5.6AI score0.00748EPSS
SaveExploits1References1
CVE
CVE
added 2026/01/29 5:16 p.m.40 views

CVE-2026-24054

Kata Containers Runtime (kata-containers) versions prior to 3.26.0 are affected. When a container image is malformed or has no layers, containerd bind-mounts an empty snapshotter directory for the container rootfs; the Kata runtime then mounts rootfs and may detect it as a block device, causing t...

10CVSS5.8AI score0.00445EPSS
SaveExploits1References5Affected Software1
The Hacker News
The Hacker News
added 2026/01/29 11:55 a.m.12 views

Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps

A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology OT networks of substations, power plants, and control centers worldwide. Drawing on data from more than 100 installations, the analysis highlights recurring technical, organizational, and functional issues...

7.8CVSS6.1AI score0.74497EPSS
SaveExploits7
RedhatCVE
RedhatCVE
added 2026/01/29 3:26 a.m.16 views

CVE-2026-1506

A vulnerability was determined in D-Link DIR-615 4.10. Impacted is an unknown function of the file /advmacfilter.php of the component MAC Filter Configuration. This manipulation of the argument mac causes os command injection. The attack is possible to be carried out remotely. The exploit has bee...

8.6CVSS5.6AI score0.0516EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/29 3:26 a.m.16 views

CVE-2022-40620

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker suitably positioned on the network could intercept the update request and deliver a...

7.7CVSS6.4AI score0.00285EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/01/29 2:40 a.m.25 views

EUVD-2025-206522

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates...

6.3CVSS5.9AI score0.00143EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.11 views

PT-2026-5316

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 3.26.0 Description Kata Containers is an open source project implementing lightweight Virtual Machines VMs functioning like containers. In versions prior to 3.26.0, a malformed or layerless container image can...

9.3CVSS5.4AI score0.00445EPSS
SaveExploits1References11
NVD
NVD
added 2026/01/28 10:15 p.m.15 views

CVE-2026-1544

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub41E2A0 of the file /goform/setmode. Performing a manipulation of the argument langateway results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to...

8.8CVSS0.03406EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/28 9:32 p.m.56 views

CVE-2026-1544 D-Link DIR-823X set_mode sub_41E2A0 os command injection

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub41E2A0 of the file /goform/setmode. Performing a manipulation of the argument langateway results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to...

6.5CVSS0.03406EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/28 9:32 p.m.7 views

CVE-2026-1544 D-Link DIR-823X set_mode sub_41E2A0 os command injection

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub41E2A0 of the file /goform/setmode. Performing a manipulation of the argument langateway results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to...

6.5CVSS5.7AI score0.03406EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/28 9:32 p.m.9 views

CVE-2026-1544

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub41E2A0 of the file /goform/setmode. Performing a manipulation of the argument langateway results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to...

6.5CVSS5.7AI score0.03406EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/01/28 9:16 p.m.8 views

CVE-2026-1532

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

5.5CVSS0.00748EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/28 8:32 p.m.5 views

CVE-2026-1532

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

4.8CVSS5.6AI score0.00748EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/01/28 7:16 p.m.10 views

CVE-2022-40620

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker suitably positioned on the network could intercept the update request and deliver a...

7.7CVSS6.3AI score0.00285EPSS
SaveExploits1References2
Rows per page
Query Builder