CVE-2026-4184

CVE-2026-4184 affects D-Link DIR-816, firmware 1.10CNB05. The vulnerability lies in the goahead component, specifically the /goform/form2Wl5BasicSetup.cgi handler where manipulating the pskValue parameter triggers a stack-based buffer overflow. It is exploitable remotely and the exploit is public...

CVE-2026-4182

CVE-2026-4182 affects the D-Link DIR-816 (firmware 1.10CNB05). The vulnerability exists in the goahead component, specifically the file /goform/form2Wl5RepeaterStep2.cgi, where manipulating the arguments key1/key2/key3/key4/pskValue causes a stack-based buffer overflow . This enables remote explo...

CVE-2026-4181

CVE-2026-4181 affects D-Link DIR-816 (firmware 1.10CNB05) with a stack-based overflow in /goform/form2RepeaterStep2.cgi of the goahead component. The vulnerability arises from improper handling of the key1/key2/key3/key4/pskValue arguments, enabling a remote, potentially unauthenticated attacker ...

CVE-2026-4172

A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /pingresponse.cgi of the component HTTP POST Request Handler. The manipulation of the argument pingipaddr results in stack-based buffer overflow. The attack may be performed from remote. The...

czeview-meari-firmware

CZeView / Meari Camera — Root & Firmware Research Reverse eng...

PT-2026-37072

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the Bluetooth component. In the download firmware function, if request firmware succeeds but the returned firmware content is invalid, such as having no data or...

EUVD-2026-11713

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they hav...

EUVD-2026-11709

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an OS command allowing remote code execution by attackers with low privilege access on the gateway,...

EUVD-2026-11711

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an attacker with a stolen session cookie to find the user password by brute-forcing an encryption...

CVE-2026-25819

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they hav...

CVE-2026-25817

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an OS command allowing remote code execution by attackers with low privilege access on the gateway,...

CVE-2026-22209

thingino-firmware up to commit e3f6a41 published on 2026-03-15 contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...

CVE-2025-13777

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploitable Conditions Agent A GitHub Copilot agent that anal...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

AetherGuard Security Test Dataset !License: MIThttps://im...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

🐍 SNAKEBITE v2.0 ⚡ The Ultimate Automated Web Security Sc...

2025.3 IPU, UEFI Reference Firmware Advisory

Summary: Potential security vulnerabilities in UEFI for some Intel® reference platforms may allow escalation of privilege or information disclosure. Intel is releasing UEFI firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20105 Description:...

PT-2026-36328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto CCP module when retrieving the PDH certificate. If a firmware command fails, specifically due to an invalid length where the userspace buffer is too small,...

PT-2026-36329

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto CCP component when retrieving the PEK CSR. If a firmware command fails, specifically due to an invalid length where the userspace buffer is too small, the...

PT-2026-36327

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto CCP module when retrieving the CPU ID. If a firmware command fails, specifically due to an invalid length where the userspace buffer is too small, the syste...