PT-2026-93843

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2025-56565: Cleartext Storage of Sensitive Information

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

CVE-2025-56565

The DD-WRT firmware deployed on TP-Link TL-WR740N v1 through v4 hardware contains a vulnerability where sensitive authentication credentials are stored in cleartext within non-volatile memory. Exposed information includes SSH private keys , dynamic DNS passwords, email notification credentials, a...

EUVD-2025-210925

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

CVE-2026-15639: Improper Neutralization of Input During Web Page Generation

An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker...

PT-2026-93928

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free flaw exists in the Proto Link Handler component within the gf inline get proto lib function of the src/compositor/mpeg4 inline.c file. A use after free is a memory corruption issue where an...

CVE-2026-92474: Use After Free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

PT-2026-93849

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description The parseLink function in registry/remote/utils.go fails to validate the scheme, host, or port of absolute URLs provided in the Link response header from a registry. This allows a malicious registry ...

CVE-2026-85732: Server-Side Request Forgery (SSRF)

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then...

CVE-2026-71182: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

PT-2026-93844

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

SSRF vulnerability in gradle allows capturing the Develocity access key

gradle provides global options for administrators to detect build scan links in build logs, and to show an enriched build scan summary for those build scans on the build page. In gradle 2.19.1252.v15196b5a6e10 and earlier, the enriched build scan summary requests data from the build scan link...

CVE-2026-71181: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

PT-2026-93513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the v4l2 fwnode parse link function. The remote endpoint fwnode reference is acquired via fwnode graph get remote endpoint, and while it is released during err...

ROS-20260916-73-0021

The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-93947

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

CVE-2025-56565

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38565)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setWanIeCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

The vulnerability of the `formAdvanceSetup` function in the `/goform/formAdvanceSetup` file, belonging to the POST Request Handler of the D-Link DIR-513 router’s microprogramming system, allows a intruder to cause a service failure.

The vulnerability of the formAdvanceSetup function in the /goform/formAdvanceSetup file of the POST Request Handler component of the D-Link DIR-513 router microprogramming system is related to the copying of buffer data without checking the size of the input data during the processing of the...

The vulnerability of the Wireless Setup Section component in the microprogramming software of D-Link DSL-2740R routers allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...