473009 matches found
CVE-2026-76583 TRENDnet TV-IP751WIC alphapd set_time.cgi command injection
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-76583
TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.
CVE-2026-75616 Command Injection in Router Web Management Interface
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...
EUVD-2026-63081
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...
CVE-2026-75616
An OS command injection vulnerability exists in the web management interface of the TP-Link Archer C20 v6 firmware . Insufficient input validation in certain WAN-related configuration operations allows an authenticated administrator to execute arbitrary system commands with elevated privileges, p...
CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...
EUVD-2026-63078
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...
CVE-2026-53545 Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...
CVE-2026-53545 Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...
EUVD-2026-62860
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...
CVE-2026-53545
Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...
CVE-2026-53542 Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...
CVE-2026-53542
CVE-2026-53542 is a tar option injection vulnerability in Termix , a web-based server management platform, prior to version 2.3.2. The archive creation endpoint in src/backend/ssh/file-manager.ts passes user-selected file basenames to tar without an end-of-options marker (--) and without ensuring...
EUVD-2026-62858
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the archive creation endpoint in src/backend/ssh/file-manager.ts passes selected file basenames to tar without an end-of-options marker and without making the operands...
CVE-2026-54689
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:08+00:00| published-proof-of-concept| https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-wppf-h75h-6pm6...
CVE-2026-55703
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:05+00:00| published-proof-of-concept| https://github.com/grokability/snipe-it/security/advisories/GHSA-r9r3-g9fp-3q4q...
CVE-2026-76582
TRENDnet TEW-821DAP firmware 2.2.01b05 passes the unsanitized ipaddr argument from /cgi-bin/ping.cgi to popen/system in the ssi component, enabling remote command injection; a proof-of-concept exploit is publicly available on GitHub. No patch or workaround is mentioned in the provided documents.
EUVD-2026-62852
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2026-76582 TRENDnet TEW-821DAP ssi ping.cgi system command injection
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...
