Lucene search
+L

32884 matches found

BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•14 views

The vulnerability in the script/cgi-bin/download_mgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04, allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/downloadmgr.cgi script in the microprogramming software for D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...

6.5CVSS6.3AI score0.23656EPSS
SaveExploits1References2Affected Software20
BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•14 views

The vulnerability in the script /cgi-bin/remote_backup.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04, allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/remotebackup.cgi script in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...

6.5CVSS6.3AI score0.05771EPSS
SaveExploits1References3Affected Software20
BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•11 views

The vulnerability of the cgi_addgroup_get_group_quota_minsize() function in the /cgi-bin/account_mgr.cgi script of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cgiaddgroupgetgroupquotaminsize function in the /cgi-bin/accountmgr.cgi script of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...

9CVSS6.2AI score0.0117EPSS
SaveExploits1References7Affected Software20
BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•12 views

The vulnerability in the script /cgi-bin/wizard_mgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04, allows a hacker to execute arbitrary commands.

The vulnerability in the script /cgi-bin/wizardmgr.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 lies in the lack of...

6.5CVSS6.3AI score0.05505EPSS
SaveExploits1References2Affected Software20
BDU FSTEC
BDU FSTEC
•added 2026/07/09 12:00 a.m.•12 views

The vulnerability of the Webdav_Access_List() (/cgi-bin/file_center.cgi) function in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 is related to deficiencies in access control. This allows a intruder to gain unauthorized access to protected information.

The vulnerability of the WebdavAccessList /cgi-bin/filecenter.cgi function in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4,...

5.3CVSS6.1AI score0.01322EPSS
SaveExploits1References2Affected Software20
Qualys Blog
Qualys Blog
•added 2026/07/08 5:38 p.m.•19 views

FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices

Key Takeaways FortiBleed refers to June 2026 public reporting of large-scale credential exposure and abuse targeting internet-reachable FortiGate management and SSL-VPN gateways driven by credential reuse and brute-force, not a single new zero-day. Risk is highest for internet-exposed FortiGate...

9.8CVSS7.1AI score0.85796EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2026/07/08 3:52 p.m.•51 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.4AI score0.01625EPSS
SaveExploits4References26
RedHat Linux
RedHat Linux
•added 2026/07/08 10:08 a.m.•33 views

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Red Hat Edge Manager Version 1.0.3 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

10CVSS6.5AI score0.02618EPSS
SaveExploits8References28
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•26 views

PT-2026-56911

Name of the Vulnerable Software and Affected Versions PAN-OS affected versions not specified Description An issue in the management web interface of PAN-OS software, affecting PA-Series and VM-Series firewalls as well as Panorama virtual and M-Series, allows an unauthenticated attacker with netwo...

6.9CVSS6.6AI score0.00293EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/07/08 12:00 a.m.•11 views

The vulnerability of the clone_dtr() function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types (RAID and LVM), which allows a hacker to cause service failure.

The vulnerability of the clonedtr function in the drivers/md/dm-clone-target.c file of the Linux kernel driver for multiple device types RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00244EPSS
SaveExploits0References10Affected Software2
HackRead
HackRead
•added 2026/07/07 10:24 p.m.•45 views

Why Unity Remains the Most Popular Engine for Mobile Games

Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...

6AI score
SaveExploits0
OSV
OSV
•added 2026/07/07 4:03 p.m.•19 views

PYSEC-2026-1326 ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

Summary An integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used. Details The bounds check ptr + fieldlength end in components/api/proto.cpp can overflow when a malicious client sends a large fieldlength value. This affects all...

6.8CVSS6AI score0.00305EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 3:34 p.m.•41 views

Malicious code in nonexistent-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9393b3fc67ac5c169de7089d2f5100b5cb49af4e2b747b46726660bebc2bf66a No a static rule matches and no traced behavioral findings were produced for this package version. Nothing in the analyzed artifacts indicates...

6.2AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 3:20 p.m.•37 views

Malicious code in chai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9192d163b3814064c95a23cb11e218732346628f3109517aab7697c2dcb6d016 On require, index.js spawns a detached background node process that runs lib/initializeCaller.js. That module axios.gets a base64-obfuscated URL...

6.2AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/07/07 2:32 p.m.•20 views

EUVD-2026-42048

A stored cross-site scripting XSS vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the...

4.8CVSS5.8AI score0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/07 2:32 p.m.•17 views

CVE-2026-12948 Stored Cross-Site Scripting (XSS)

A stored cross-site scripting XSS vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the...

4.8CVSS5.8AI score0.00418EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/07/07 6:23 a.m.•26 views

SEIKO EPSON printers and scanners Web Config vulnerable to cross-site request forgery

Overview Web Config embedded in multiple printers and scanners provided by SEIKO EPSON CORPORATION contains the following vulnerability. Cross-site request forgery CWE-352 - CVE-2026-58315 Kentaro Ishii of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated...

5.1CVSS6.1AI score0.00148EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/07 2:35 a.m.•21 views

SUSE CVE-2026-13912

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00245EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/07 12:00 a.m.•19 views

The vulnerability of the amdgpu_cs parser_init() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver code allows a hacker to cause a service failure in AMD GPU-based Linux operating system DRI infrastructure.

The vulnerability of the amdgpucs parserinit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver module relates to the pointer manipulation in the AMD GPU kernel support for Linux operating systems. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00278EPSS
SaveExploits0References23Affected Software2
Android Security Bulletins
Android Security Bulletins
•added 2026/07/07 12:00 a.m.•93 views

Pixel Update Bulletin—July 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2026-07-05 or later address all issues in this bulletin and all issues in the July 2026 Android Securit...

6.1AI score
SaveExploits0
Rows per page
Query Builder