CVE-2026-16332: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16331: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16327: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

D-Link DNS-320 Upload Component DoS

The vulnerability of the /photocenter/php/uploadify.php component in the D-Link DNS-320 network storage software is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability allows an attacker to cause service failures...

Linux kernel GPIO driver Heap Buffer Overflow DoS

The vulnerability of the lineinfochangednotify function in the drivers/gpio/gpiolib-cdev.c driver for the Linux kernel’s GPIO driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the devlratenodesdestroy function in the net/devlink/rate.c module, which is part of the Linux kernel’s networking functions, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

D-Link DNS-320 DoS

The vulnerability of the URL processor in the web interface of the D-Link DNS-320 network storage microprogramming system is related to errors in access control when processing the File parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions...

D-Link DNS-320 DoS

The vulnerability of the /web/jquery/uploader/uploadify.php component in the D-Link DNS-320 network storage software is related to access control errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-15812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured t...

PT-2026-62118

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visit page tool, which only validates the URL protocol without filtering private or reserved I...

CVE-2026-57495

creationtimestamp| type| source ---|---|--- 2026-07-20 23:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4icrfnis2e...

CVE-2026-16327

The CVE-2026-16327 entry concerns D-Link DNS-320 firmware 1.0.2 where the /web/web_file/upload.php upload handling is vulnerable. Manipulating the File argument enables unrestricted file upload, with the attack executable remotely. The exploit has been publicly disclosed. No further remediation d...

CVE-2026-16327

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-16327 D-Link DNS-320 upload.php unrestricted upload

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-16327 D-Link DNS-320 upload.php unrestricted upload

A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/webfile/upload.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been publicly disclosed and m...

CVE-2026-55544

creationtimestamp| type| source ---|---|--- 2026-07-20 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fkeqfif2u...

CVE-2026-55668

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:33+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-8wc8-hf36-mjh9...

CVE-2026-56833

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:17+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c 2026-10-23 12:15:24+00:00| seen| https://infosec.exchange/users/cve/statuses/117490170165920093...

CVE-2026-56835

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:12+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr 2026-10-23 12:16:44+00:00| seen| https://infosec.exchange/users/cve/statuses/117490175446914977...

CVE-2026-56838

creationtimestamp| type| source ---|---|--- 2026-07-20 22:37:04+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg 2026-10-23 12:18:45+00:00| seen| https://infosec.exchange/users/cve/statuses/117490183382533514...