PT-2026-80855

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFileTo opens the computed destination with...

PT-2026-81034

Name of the Vulnerable Software and Affected Versions OneNav version 1.2.4 Description An authenticated user can perform arbitrary file deletion through the import link function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

CVE-2025-26237

The D-Link DI-7001 MINI_5G (version 19.10.31A1 ) is susceptible to a code execution vulnerability located in the flag parameter of the msp_info component. An attacker can exploit this flaw to execute arbitrary commands on the affected device. The vulnerability is categorized as Improper Neutraliz...

CVE-2026-78541: Improper Neutralization of Special Elements used in an OS Command

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

PT-2026-80993

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

PT-2026-80979

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

EUVD-2025-210769

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

The vulnerability of the gfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the gfs2 component in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the p2pdma.c component in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the p2pdma.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the verifier.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the verifier.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mcast module in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mcast module in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of RDMA/rxe components of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of RDMA/rxe components in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/dpll/dpll_core.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/dpll/dpllcore.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code in the context of LOCAL SERVICE on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2026-59320

CVE-2026-59320...

PT-2026-95899

Name of the Vulnerable Software and Affected Versions D-Link R95 BE9500 version 1.00.16 Description An OS command injection flaw exists in the DHMAPI component of the device. The issue occurs when the NTPServer argument is processed by the system function within the /bin/ssi file. Because the inp...

Exploit for CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-L...

CVE-2026-74609

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlocked / if !l return; tipcnodewritelockn; if !tipclinkisestablishingl /...