72 matches found
CVE-2026-76955
A buffer overflow vulnerability in the zdpwtp binary in Zyxel NWA110AX firmware versions through 7.12ABTG.0C0 could allow a LAN-based attacker to escalate privileges on an affected device...
EUVD-2026-115655
A buffer overflow vulnerability in the zdpwtp binary in Zyxel NWA110AX firmware versions through 7.12ABTG.0C0 could allow a LAN-based attacker to escalate privileges on an affected device...
CVE-2026-76955
A buffer overflow vulnerability in the zdpwtp binary in Zyxel NWA110AX firmware versions through 7.12ABTG.0C0 could allow a LAN-based attacker to escalate privileges on an affected device...
CVE-2026-76955
A buffer overflow vulnerability exists in the zdp_wtp binary of Zyxel NWA110AX devices running firmware versions through 7.12(ABTG.0)C0 . This flaw could allow a LAN-based attacker to achieve privilege escalation on the affected hardware. The vulnerability is associated with CWE-120 (Buffer Copy ...
CVE-2026-76955: Zyxel NWA110AX firmware: A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could…
A buffer overflow vulnerability in the zdpwtp binary in Zyxel NWA110AX firmware versions through 7.12ABTG.0C0 could allow a LAN-based attacker to escalate privileges on an affected device...
PT-2026-135853
A buffer overflow vulnerability in the zdp wtp binary in Zyxel NWA110AX firmware versions through 7.12ABTG.0C0 could allow a LAN-based attacker to escalate privileges on an affected device...
CVE-2026-76873: Improper Neutralization of Input During Web Page Generation
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...
CVE-2026-9254
An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...
CVE-2026-9254 Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices
An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...
PT-2026-80985
Name of the Vulnerable Software and Affected Versions Archer BE800 V1 affected versions not specified Archer BE3600 V1 affected versions not specified Archer AX75 V1 affected versions not specified Description An unauthenticated OS command injection exists in the parental control functionality...
CVE-2026-7273: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90ABTQ.1C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request...
CVE-2026-49195
Unauthenticated Debug Service. The /sbin/mtkdut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands...
CVE-2026-49195: Missing Authentication for Critical Function
Unauthenticated Debug Service. The /sbin/mtkdut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands...
CVE-2026-4795: Missing Authorization
A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00ACPS.2C0, GS1200-8v3 firmware versions through 1.00ACPT.2C0, GS1200-5HPv3 firmware versions through 1.00ACPU.2C0, GS1200-8HPv3 firmware versions through 1.00ACPV.2C0, and GS1200-10v3 firmware versions through...
EUVD-2024-49454
Malicious code in bioql PyPI...
EUVD-2024-49453
Malicious code in bioql PyPI...
EUVD-2023-38240
Malicious code in bioql PyPI...
EUVD-2023-38243
Malicious code in bioql PyPI...
EUVD-2024-37235
Malicious code in bioql PyPI...
CVE-2023-34139
A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affecte...