232326 matches found
CVE-2026-16327
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...
CVE-2026-16327 D-Link DNS-320 upload.php unrestricted upload
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...
CVE-2026-16327 D-Link DNS-320 upload.php unrestricted upload
A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...
wp2shell_sqli_min_poc
This PoC uses widg...
CVE-2026-15904
A use after free vulnerability exists in the Ozone component of Google Chrome on Linux (versions prior to 150.0.7871.128 ). The flaw allows a remote attacker to exploit heap corruption by convincing a user to perform specific UI gestures while visiting a crafted HTML page. Exploitation of this vu...
CVE-2026-64626
AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an intern...
CVE-2026-16324 Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...
CVE-2026-16324 Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...
CVE-2026-16324
A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the file /business/qnaire/upload.jsp. Such manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...
CVE-2026-16324
CVE-2026-16324 affects Metasoft MetaCRM up to version 6.4.0 Beta06. The vulnerable component is an unknown function in the file /business/qnaire/upload.jsp, where manipulation of the argument File enables unrestricted file upload. Attacks may be launched remotely, and the exploit is publicly avai...
oras-go: oras-go: File store write outside working directory via symlink traversal
A flaw was found in oras-go. The file content store, intended to confine writes to a specified working directory, does not properly account for symbolic link symlink traversal. A remote attacker, by providing a specially crafted blob title, could exploit this vulnerability to create files outside...
Exploit for CVE-2026-12191
No d...
CVE-2026-63767
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can...
EUVD-2026-41925
vLLM denial of service via prompt embeds on M-RoPE models...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
CVE-2026-47275
Nanomq has a NULL pointer dereference in nni_mqttv5_msg_decode_connect() (mqtt_codec.c:1863) for versions ≤ 0.24.11. The code iterates CONNECT properties using prop instead of will_prop; when a packet has no connect-level properties but has will properties, dereferencing prop->next can SIGSEGV...
CVE-2026-16252
A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...
CVE-2026-16252 Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection
A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...
EUVD-2026-45949
A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System 8.2.2. Impacted is an unknown function of the file /admin/system/structure/updateStructure/deflate/Insecure/Staffshinel Ds.jsp?Shine ID=aaa. The manipulation of the argument...