1423 matches found
Exploit for CVE-2025-38900
Patch: CVE-2025-38900 Vulnerability Details - CVE: CVE...
Exploit for CVE-2025-42558
Patch: CVE-2025-42558 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-02777
Patch: CVE-2026-02777 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-04321
Patch: CVE-2026-04321 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-14290
Patch: CVE-2026-14290 Vulnerability Details - CVE: CVE...
cve-disclosures
CVE Disclosures | Findings...
CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
CVE-2026-77988
A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...
CVE-2026-76988
CIPster's ForwardOpen handler in cipconnectionmanager.cc reads attacker-controlled product_code_ without bounds checking, causing an out-of-bounds read exploitable remotely with no authentication. CVSS 5.3 (MEDIUM) impact is availability only. Public proof-of-concept exploit exists; apply patch e...
CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
PT-2026-76596
A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download image of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument image url results in server-side request forgery...
CVE-2026-19925 SourceCodester Stock Management System Master.php delete_supplier sql injection
A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...
CVE-2026-19900 LB-LINK X-PRO shadow hard-coded credentials
A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The...
EUVD-2026-59776
A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The...
Linux Distros Unpatched Vulnerability : CVE-2026-19720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - inetutils - None Ubuntu Linux - talkd buffer overflow with long DNS names CVE-2026-19720 Note that Nessus relies on the presence of the package a...
CVE-2026-19812 TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow
A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...
EUVD-2026-58575
A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...
Linux Distros Unpatched Vulnerability : CVE-2026-73260
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73260 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...
Linux Distros Unpatched Vulnerability : CVE-2026-53793
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by...