10239 matches found
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-50116: kernel: tty: ngsm: fix deadlock and link starvation in outgoing data path bsc1244824. CVE-2024-53177: smb: prevent use-after-free due to opencacheddir...
CVE-2026-1125
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
SwingMusic: Access control error vulnerability
SwingMusic is an open-source local music player developed by Swing Music. Versions of SwingMusic prior to 2.1.4 contained a access control error vulnerability. This vulnerability stemmed from a directory traversal vulnerability in the listfolders function within the /folder/dir-browser endpoint,...
D-Link DIR-806A Command Injection Vulnerability
The D-Link DIR-806A is a wireless router from China's AUO D-Link. A command injection vulnerability exists in the D-Link DIR-806A version 100CNb11, which stems from the failure of the ssdpcgimain function in the SSDP Request Handler component to correctly filter constructed command special...
CVE-2026-1125
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
CVE-2026-1125
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
CVE-2026-1125 D-Link DIR-823X set_wifidog_settings sub_412E7C command injection
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
CVE-2026-1125 D-Link DIR-823X set_wifidog_settings sub_412E7C command injection
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
CVE-2026-1125
CVE-2026-1125 affects D-Link DIR-823X router firmware 250416. The issue resides in the sub_412E7C function within /goform/set_wifidog_settings; manipulating the wd_enable parameter can trigger a remote command injection. Public exploitation appears to be available. Connected sources corroborate t...
CVE-2026-1125: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003782)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003782 advisory. ext4emptydir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4readdirblockinode,0,DIRENTHTREE can be zero. Tenable...
PT-2026-5780
Уязвимость функции sub 40AC74 микропрограммного обеспечения маршрутизаторов D-link DIR-823X связана с неправильным ограничением чрезмерного количества попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, реализовать атаку методом «грубой силы» brute...
PT-2026-5404
Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in the Login component of the D-Link DIR-823X, specifically within the sub 40AC74 function. This issue results in insufficient restriction of excessive authentication attempts, potential...
PT-2026-5227
Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A security flaw exists in D-Link DIR-823X version 250416. The issue is related to the sub 41E2A0 function within the /goform/set mode file. Manipulation of the lan gateway argument can lead to operati...
The vulnerability of the strcpy() function in the /goform/formFtpServerDirConfig file of the UTT 512W router software, which allows a attacker to execute arbitrary code.
The vulnerability of the strcpy function in the /goform/formFtpServerDirConfig file of the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by...
PT-2026-5785
Уязвимость сценария /set temp nodes.php микропрограммного обеспечения маршрутизаторов DIR-615 связана с непринятием мер по нейтрализации специальных элементов при обработке поля URL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды...
ROS-20260112-7341
A vulnerability in the xfsdir3datacheck function fs/xfs/libxfs/xfsdir2data.c of the Linux operating system kernel is related to reading data beyond buffer boundaries in memory. Exploitation of the vulnerability allows an attacker to cause a denial of service...
PT-2026-2317
Name of the Vulnerable Software and Affected Versions LlamaIndex versions up to and including 0.11.6 Description LlamaIndex contains an unsafe deserialization issue in the BGEM3Index.load from disk function located in llama index/indices/managed/bge m3/base.py. The function utilizes pickle.load t...