CVE-2025-26238: Improper Control of Generation of Code

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

PT-2026-80855

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

The vulnerability of the p2pdma.c component in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the p2pdma.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of RDMA/rxe components of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of RDMA/rxe components in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the verifier.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the verifier.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the gfs2 component in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mcast module in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mcast module in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code in the context of LOCAL SERVICE on the target system in order to exploit this vulnerability. The specific flaw...

PT-2026-80979

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

EUVD-2025-210769

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

The vulnerability in the driver/dpll/dpll_core.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/dpll/dpllcore.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-81009

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-59320

CVE-2026-59320...

PT-2026-95899

Name of the Vulnerable Software and Affected Versions D-Link R95 BE9500 version 1.00.16 Description An OS command injection flaw exists in the DHMAPI component of the device. The issue occurs when the NTPServer argument is processed by the system function within the /bin/ssi file. Because the inp...

Exploit for CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-L...

CVE-2026-74609

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlocked / if !l return; tipcnodewritelockn; if !tipclinkisestablishingl /...

Security Bulletin: MaaS360 mobile apps (iOS and Android) are able to bypass authentication by using deep link from the browser.

Summary MaaS360 mobile apps iOS and Android are able to bypass authentication by using deep link from the browser. Vulnerability Details CVEID:CVE-2023-42021 DESCRIPTION: The MaaS360 iOS application could allow an attacker to bypass authentication mechanisms by exploiting the password reset...

CVE-2026-74609

CVE-2026-74609 is a use-after-free race condition in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem, specifically in tipc_node_link_down(). The function caches the le->link pointer before acquiring n->lock, then dereferences it under the lock. A concurrent delet...