225792 matches found
CVE-2026-76576
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...
CVE-2026-76584
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
EUVD-2026-63094
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...
CVE-2026-63117
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. An authenticated Remote Desktop Protocol RDP client can trigger a denial of service by sending a specially crafted DVI ADPCM frame. By advertising specific nBlockAlign and nChannels values, a division-by-zero error...
CVE-2026-76583 TRENDnet TV-IP751WIC alphapd set_time.cgi command injection
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...
EUVD-2026-63083
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-76583
TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.
CVE-2026-75616 Command Injection in Router Web Management Interface
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...
CVE-2026-76582
TRENDnet TEW-821DAP firmware 2.2.01b05 passes the unsanitized ipaddr argument from /cgi-bin/ping.cgi to popen/system in the ssi component, enabling remote command injection; a proof-of-concept exploit is publicly available on GitHub. No patch or workaround is mentioned in the provided documents.
EUVD-2026-62852
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2026-17106 vulnerabilities
Vulnerabilities for packages: skaffold, buildkitd-fips, openbao, buildah-fips, skaffold-fips, docker-fips, openbao-fips, ctop-fips, docker-cli-buildx-fips, telegraf, buildah, podman, docker-cli-buildx, podman-fips, buildkitd...
CVE-2026-16914
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write...
CVE-2026-16872
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
EUVD-2026-62846
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...
CVE-2025-14600
creationtimestamp| type| source ---|---|--- 2026-08-19 20:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthjxsgklv2b 2026-08-19 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthu2ikmaa2f 2026-08-20 00:19:44+00:00| seen|...
EUVD-2026-62836
A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...
CVE-2026-16875
A local attacker with low privileges on IBM AIX 7.2/7.3 or PowerVM VIOS 4.1 can inject shell metacharacters to execute arbitrary commands, scoring CVSS 7.8 (High). IBM's support page (https://www.ibm.com/support/pages/node/7283858) should be checked for available patches or workarounds.
