CVE-2026-100740

CVE-2026-100740 — D-Link DIR-895L L2TP OOB Write Python 3 PoC for CVE-2026-100740 — D-Link DIR-895L firmware A1102b07. Description PoCbit / GitHub CVE-2026-100740 — Out-of-bounds write CWE-787 / CWE-119 in tunnelsetparams tunnel.c, L2TP control channel parser. Host Name AVP length is clamped to 1...

CVE-2025-65731

CVE-2025-65731 CWE-1191: Interfaz de depuración y prueba en chip con control de acceso inadecuado Acceso a shell raíz vía UART en D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Resumen Se ha identificado una vulnerabilidad de hardware crítica en el router D-Link DIR-605L, versión de hardware F1,...

CVE-2023-33782

CVE-2023-33782 Descripción Se descubrió que D-Link DIR-842V2 v1.0.3 contiene una vulnerabilidad de inyección de comandos en la funcionalidad de diagnóstico de iperf3. Prueba de concepto...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

CVE-2023-6553

CVE-2023-6553 Inclusión de archivos en PHP que conduce a RCE — Plugin Backup Migration Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Crítico CWE: CWE-98 — Control inadecuado del nombre de archivo para la declaración Include/Require Requisito de autenticación: Ninguno Impacto: Ejecución...

AlmaLinux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1786548808)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786548808 advisory. - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to...

PT-2026-103842

A flaw was found in ansible-runner. The unstream dir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

The vulnerability of the tunnel_set_params() function in the L2TP Control Message Parser component of D-Link’s DIR-822A router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tunnelsetparams function in the L2TP Control Message Parser component of D-Link DIR-822A router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the tunnel_set_params() function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the tunnelsetparams function in the tunnel.c file of the L2TP Control Channel Parser component of the D-Link DIR-895L router microprogramming system is related to the escape operation from the buffer into memory. Exploiting this vulnerability could allow a remote attacker to...

CVE-2026-101080

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skillscan/tools/dir/diractions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly...

EUVD-2026-88341

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skillscan/tools/dir/diractions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly...

PT-2026-99923

Name of the Vulnerable Software and Affected Versions Tencent AI-Infra-Guard versions prior to 4.6.0 Description A path traversal issue exists within the File Access component, specifically affecting the startsWith function in the skill scan/tools/dir/dir actions.py file. This flaw allows a local...

Exploit for CVE-2026-100740

CVE-2026-100740 — D-Link DIR-895L L2TP OOB Write Python 3 PoC...

CVE-2026-100740

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

CVE-2026-100740 D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

CVE-2026-100740

The D-Link DIR-895L router, running firmware A1_102b07 , contains an out-of-bounds write (CWE-787 / CWE-119) vulnerability in the L2TP Control Channel Parser within the tunnel.c file. Specifically, the tunnel_set_params() function fails to properly handle the Host Name AVP ; while the length is c...

EUVD-2026-87816

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

CVE-2026-100740 D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

PT-2026-99461

Name of the Vulnerable Software and Affected Versions monai affected versions not specified Description In the PersistentDataset function within monai/data/dataset.py, the software rejects the simultaneous use of track meta=True and weights only=True. This forces users caching MetaTensors to use...