CVE-2026-13545

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2026-13532

creationtimestamp| type| source ---|---|--- 2026-06-29 08:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3cpev2p2y 2026-06-29 10:46:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcqd2fox2g 2026-06-29 19:55:28+00:00| seen|...

CVE-2026-13535

creationtimestamp| type| source ---|---|--- 2026-06-29 08:28:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2zqxq6j2a 2026-06-29 10:47:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcshrsp62n 2026-06-29 19:57:07+00:00| seen|...

CVE-2026-13538

creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...

CVE-2026-54816

creationtimestamp| type| source ---|---|--- 2026-06-29 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg2czqzdd2m...

CVE-2025-2902

creationtimestamp| type| source ---|---|--- 2026-06-29 08:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfzht3xd223 2026-06-29 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg45kog3k2e 2026-06-29 10:41:57+00:00| seen|...

CVE-2026-13534

creationtimestamp| type| source ---|---|--- 2026-06-29 07:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzc4zwtg27 2026-06-29 10:47:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcrrxjt72g 2026-06-29 19:58:43+00:00| seen|...

CVE-2026-13545

CVE-2026-13545 affects D-Link DCS-935L 1.10.01. The vulnerability is in the function sub_400E40 of setconf.cgi (POST Parameter Handler); manipulating the UID argument enables an OS command injection. The attack can be launched remotely, and the exploit has been disclosed publicly. CVSS metrics in...

EUVD-2026-40045

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2026-13545 D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2026-13527

creationtimestamp| type| source ---|---|--- 2026-06-29 04:11:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfmnumhwv2g 2026-06-29 19:58:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphbkqiueg23...

CVE-2026-13529

creationtimestamp| type| source ---|---|--- 2026-06-29 04:05:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfmd3aopf2u 2026-06-29 19:53:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphbcr3rlr2d...

SUSE-SU-2026:22495-1 Security update for python-mistune

This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parselinktext bsc1269091...

OPENSUSE-SU-2026:21191-1 Security update for python-mistune

This update for python-mistune fixes the following issue - CVE-2026-49851: potential DoS via quadratic-time parsing in parselinktext bsc1269091...

CVE-2026-13518

creationtimestamp| type| source ---|---|--- 2026-06-29 01:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpfdnn37ri27 2026-06-29 04:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfo62wow22g...

CVE-2026-39118

creationtimestamp| type| source ---|---|--- 2026-06-29 00:06:56+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpf6y6iejs2j...

PT-2026-53753

Name of the Vulnerable Software and Affected Versions Zephyr versions prior to 4.4.0 Description An input validation weakness exists in the IPv6 Neighbor Discovery handlers within subsys/net/ip/ipv6 nbr.c. The functions handle ra input, handle ns input, and handle na input use an incorrect boolea...

PT-2026-53315

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version v14 Description An authenticated stack-based buffer overflow occurs in the web management interface. A remote authenticated attacker can send crafted HTTP requests to the embedded web server, causing a stack buffer to...

PT-2026-53294

Name of the Vulnerable Software and Affected Versions Link Whisper Free versions prior to 0.9.5 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Link Whisper Free ...

ROS-20260629-73-0047

The vulnerability of the ep93xxfbprobe function in the drivers/video/fbdev/ep93xx-fb.c driver for kernel-based graphics devices in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...