231741 matches found
CVE-2026-75013
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...
CVE-2026-75013
The affected device is the TOTOLINK EX1200L router (firmware 9.3.5u.6146_B20201023). The setWizardCfg function in /cgi-bin/cstecgi.cgi lacks a null check, causing a crash when a crafted request dereferences a null pointer remotely. A public proof-of-concept exploit exists; impact is denial of ser...
CVE-2026-75013 TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...
EUVD-2026-60363
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...
CVE-2026-75013 TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...
CVE-2026-75011
A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync of the file index.js. Executing a manipulation of the argument interface/protocol can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The proje...
CVE-2026-75012
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be...
CVE-2026-75012 TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be...
CVE-2026-75012 TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be...
CVE-2026-75011
A flaw has been found in kylecui NetForensicMCP 2.1.0. Impacted is the function execAsync of the file index.js. Executing a manipulation of the argument interface/protocol can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The proje...
CVE-2026-72043
A flaw was found in the Linux kernel, specifically affecting the LoongArch architecture when the hardware page table walker PTW is enabled. This vulnerability stems from a missing dirty page tracking mechanism in the ptewrprotect and pmdwrprotect functions, which can lead to incorrect handling of...
kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged local user can exploit an out-of-bounds write vulnerability in the kfdeventpageset function. This occurs because the function writes data without properly validating the buffer size, allowing a small buffer to trigger a...
CVE-2026-68520
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...
CVE-2026-73604
creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:23+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-73603
creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:21+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-64865
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.16, repeated PUT /api/user/self requests that update language or sidebarmodules can race relay billing because controller/user.go calls User.Update and updateUserCache performs a...
CVE-2026-73620
creationtimestamp| type| source ---|---|--- 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...
MINI-3PRC-GHH9-VWMV
Bulletin has no description...