PT-2026-80957

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth set function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

PT-2026-80951

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

PT-2026-80955

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

PT-2026-80947

Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted inpu...

PT-2026-80961

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

PT-2026-80960

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...

PT-2026-80963

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...

PT-2026-80979

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

PT-2026-80939

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

Tenable Security Center < 6.9.0 Multiple Vulnerabilities (TNS-2026-22)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-22 advisory. - libcurl might in some circumstances reuse the wrong connection for SMBS transfers...

RHEL 9 : kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 (RHSA-2026:59147)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59147 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

SPIP X-Spip-Filtre Unauthenticated Remote Code Execution

This Metasploit module exploits a PHP function-call injection in SPIPs template engine. The analyseresultatskel function extracts the X-Spip-Filtre: ... patterns from the rendered page body and calls the listed functions as template filters. A newline character is injected into a GET parameter...

MiracleLinux 9 : vim-8.2.2637-26.el9_8.13.ML.1 (AXSA:2026-1631:22)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1631:22 advisory. vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious...

sopa

sopa عميل عملي لـ ADWS بلغة Golang. تقوم أداة sopa بتنفيذ مكدس بروتوكول ADWS MS-NNS + MC-NMF + SOAP، وتوفر الميزات التالية عبر سطر الأوامر: البحث عن الكائنات واسترجاعها query: ينفذ عمليات بحث بمرشحات LDAP عبر حلقة Enumerate + Pull من WS-Enumeration مع إسقاط السمات، والتحكم في النطاق...

avml

AVML Acquire Volatile Memory for Linux Краткое описание Портативный инструмент сбора энергозависимой памяти для Linux. AVML — это инструмент сбора энергозависимой памяти в пользовательском пространстве для архитектуры X8664, написанный на Rust и предназначенный для развёртывания в виде статическо...

mvt

Mobile Verification Toolkit !IMPORTANT Nous avons récemment fusionné la branche « v3 ». Cela a introduit des changements cassants. Si vous dépendiez de la sortie de mvt dans d'autres scripts, ils ont pu casser. Plus de détails : https://github.com/mvt-project/mvt/issues/757 Mobile Verification...

ALEAPP

Парсер журналов, событий и protobuf Android ALEAPP Если хотите внести свой вклад, пишите мне сюда: https://abrignoni.github.io Посты в блоге здесь: https://leapps.org/blog Требования Python 3.10 или выше Зависимости Зависимости для вашего окружения Python перечислены в requirements.txt. Установит...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

CVE-2026-33937

CVE-2026-33937 — Injection d'AST dans Handlebars.js conduisant à une exécution de code Les versions 4.0.0 à 4.7.8 de Handlebars.js sont concernées. Score CVSS : 9,8 Critique. Vue d'ensemble CVE-2026-33937 est une vulnérabilité de confusion de types dans Handlebars.js. La fonction Handlebars.compi...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...