CVE-2026-16330

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

EUVD-2026-46137

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

EUVD-2026-46135

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-16327

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-16329 D-Link DNS-320 uploadify.php unrestricted upload

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-16329

The CVE-2026-16329 entry affects D-Link DNS-320 firmware 1.0.2. A vulnerable function in /photo_center/php/uploadify.php can be triggered by manipulating the Malicious Handler argument to allow unrestricted file upload. Exploitation is described as remote, with a publicly available exploit. No pa...

EUVD-2026-46136

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2737)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

PT-2026-63254

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting is possible due to improper handling of the day argument within the /class.php endpoint. Cross site scripting is a technique where malicious...

PT-2026-63255

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Cross site scripting occurs when manipulating the day argument within the /BSIS.php endpoint. This issue allows a remote attacker to execute malicious scripts in the...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2743)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...

EulerOS Virtualization 2.10.1 : cups (EulerOS-SA-2026-2815)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in ...

Security Vulnerabilities fixed in Firefox ESR 115.38 — Mozilla

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough...

Security Vulnerabilities fixed in Firefox ESR 140.13 — Mozilla

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 140.12 and...

CVE-2026-16327 D-Link DNS-320 upload.php unrestricted upload

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-15904

Google Chrome on Linux with Ozone is vulnerable to a use-after-free in Ozone that can lead to heap corruption. A remote attacker would need user interaction (specific UI gestures) and a crafted HTML page to potentially exploit the issue, with affected versions prior to 150.0.7871.128. Remediation...

CVE-2026-16324

CVE-2026-16324 affects Metasoft MetaCRM up to version 6.4.0 Beta06. The vulnerable component is an unknown function in the file /business/qnaire/upload.jsp, where manipulation of the argument File enables unrestricted file upload. Attacks may be launched remotely, and the exploit is publicly avai...

CVE-2026-16324 Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload

A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

EUVD-2026-41925

vLLM denial of service via prompt embeds on M-RoPE models...

ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass

A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...