2472 matches found
CVE-2026-26791
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enableechoserver function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-26791
GL-iNet GL-AR300M16 v4.3.11 contains a command injection vulnerability in the enable_echo_server function exposed via the port parameter. A crafted input can lead to arbitrary command execution on the device. The CVE entry indicates a network-exposed impact with high severity, but the provided do...
CVE-2026-26791
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enableechoserver function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-26791
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enableechoserver function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
PT-2026-25024
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enable echo server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-26791
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enableechoserver function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
GL-iNet GL-AR300M16 安全漏洞
GL-iNet GL-AR300M16 is a portable mini router produced by the Chinese company GL-iNet. The GL-iNet GL-AR300M16 v4.3.11 version contains a security vulnerability. This vulnerability stems from the string port parameter in the enableechoserver function, which allows for command injection, potential...
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-core (CVE-2025-41249)
Summary IBM Sterling Control Center is affected by a vulnerability CVE-2025-41249 of spring-core-6.2.6.jar. Vulnerability Details CVEID:CVE-2025-41249 DESCRIPTION: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a...
PT-2026-39109
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the nvme poll irqdisable function. A device can be disabled by nvme dev disable called via nvme reset work between the time an IRQ is disabled and when it is...
SUSE: Security Advisory (SUSE-SU-2026:20585-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-39013
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Flaws exist in the DMA dequeue logic of the mipi-i3c-hci driver regarding the handling of RING CTRL ABORT. The driver issues ring aborts unconditionally even if the ring has stopped, fai...
The vulnerability of the btrfs_quota_enable() function in the fs/btrfs/qgroup.c module of the file system support module for Linux kernel allows a malicious actor to trigger a service failure.
The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the file system support for the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failur...
CVE-2025-70233
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard...
CVE-2025-70233
A stack buffer overflow vulnerability exists in D-Link DIR-513 (version 1.10). The flaw is triggered by the curTime parameter within the /goform/formSetEnableWizard API endpoint. Exploitation through crafted input to this parameter may allow for the execution of arbitrary code . It is recommended...
CVE-2025-70233
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard...
📄 Honeywell Trend IQ4 Unauthenticated Add Admin
This Metasploit module exploits an insecure default configuration in Honeywell Trend IQ4 controllers. By default, these devices do not enforce authentication, allowing a remote user to enable the User Module and create a new administrative account. Note: This action permanently changes the device...
D-Link DIR-513 安全漏洞
The D-Link DIR-513 is a wireless router product from D-Link Corporation. The D-Link DIR-513 v1.10 version has a security vulnerability. This vulnerability stems from a stack buffer overflow in the curTime parameter of the goform/formSetEnableWizard function, which may allow for the execution of...
UBUNTU-CVE-2026-23232
In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fsenablecheckpoint" This reverts commit 196c81fdd438f7ac429d5639090a9816abb9760a. Original patch may cause below deadlock, revert it. write remount - writebegin - lockpage --- lock A -...
CVE-2026-23232
The CVE-2026-23232 entry pertains to the Linux kernel and the f2fs file system. According to the connected data, a patch intended to enable a block cache/DIO write during f2fs_enable_checkpoint() was reverted because the original patch could cause a deadlock. The revert sequence involves lock ord...
EUVD-2026-9389
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization within the savegutenaformsschema function in all versions up to, and including, 1.6.0. This makes...