CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2019-19781

This article is about CVE-2019-19781, a Remote Code Execution RCE vulnerability due to Directory Traversal in Citrix ADC and Gateway. This remote code execution vulnerability occurs because the validation of the smb.conf file under the /vpn path's ../vpns is not properly performed. Steals system...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

ROS-20261027-73-0009

The vulnerability in the OpenSSH cryptographic protection tool exists due to insufficient input validation. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or shut down the sshd service...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-122474

Уязвимость функции обработки пакетов IPv4 операционной системы Cisco IOS XR сетевых устройств Cisco ASR 9000 и ASR 9900 связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

ROS-20261021-73-0059

The vulnerability in Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20261021-73-0070

The vulnerability of the rdpeiserverhandlemessages function in the channels/rdpei/server/rdpeimain.c file of the RDP client FreeRDP is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome Microsoft Edge DoS

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Cast component Protected Information Access

The vulnerability in the Cast component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

IBM Sterling Connect Direct buffer error vulnerability

IBM Sterling Connect Direct for Unix versions 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 have a buffer error vulnerability. This vulnerability stems from insufficient input validation by the apnotify utility, making it susceptible to code injection attacks...

Navigation section of Microsoft Data Compromise

The vulnerability in the Navigation section of Microsoft Edge and Google Chrome browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Navigation section of Microsoft Data Compromise

The vulnerability in the Navigation section of Microsoft Edge and Google Chrome browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

CVE-2026-107918

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

EUVD-2026-98778

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

CVE-2026-107917 Insufficient input validation vulnerability in NETGEAR R7300 router

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107917 Insufficient input validation vulnerability in NETGEAR R7300 router

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

EUVD-2026-98777

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...