Lucene search
+L

65757 matches found

Vulnrichment
Vulnrichment
added 2026/05/11 10:00 p.m.11 views

CVE-2026-8345 D-Link DIR-816 singlePortForward sub_445E7C command injection

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

6.5CVSS6.4AI score0.03156EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/05/11 10:00 p.m.8 views

CVE-2026-8345

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

6.5CVSS6.4AI score0.03156EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/05/11 10:00 p.m.70 views

CVE-2026-8345 D-Link DIR-816 singlePortForward sub_445E7C command injection

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

6.5CVSS0.03156EPSS
SaveExploits1References5
CVE
CVE
added 2026/05/11 10:00 p.m.29 views

CVE-2026-8345

The vulnerability CVE-2026-8345 affects D-Link DIR-816 devices (firmware version 1.10CNB05_R1B011D88210). The issue resides in function sub_445E7C of /goform/singlePortForward, where manipulating the ip_address argument enables command injection. Exploitation can be performed remotely. The public...

8.8CVSS6.4AI score0.03156EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2026/05/11 10:00 p.m.25 views

EUVD-2026-29346

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

6.5CVSS6.4AI score0.03156EPSS
SaveExploits1References5
Circl
Circl
added 2026/05/11 10:00 p.m.19 views

CVE-2026-40621

creationtimestamp| type| source ---|---|--- 2026-05-11 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN03037325 2026-05-13 15:56:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlqo54teta2n 2026-06-03 01:22:01+00:00| seen|...

9.8CVSS8.4AI score0.00491EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/05/11 9:42 p.m.58 views

CVE-2026-43899 DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl`

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves DeepChat vulnerable to an arbitrary protocol execution bypass RCE. While the patch correctly restricted...

9.6CVSS0.0033EPSS
SaveExploits0References1
Circl
Circl
added 2026/05/11 9:30 p.m.16 views

CVE-2026-45025

creationtimestamp| type| source ---|---|--- 2026-05-11 21:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlm7uf7ym52p...

6.8CVSS5.8AI score0.0023EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/11 9:30 p.m.15 views

CVE-2026-8344

A weakness has been identified in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this vulnerability is the function sub445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

6.5CVSS6.4AI score0.03156EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/05/11 9:30 p.m.63 views

CVE-2026-8344 D-Link DIR-816 formDMZ.cgi sub_445E7C command injection

A weakness has been identified in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this vulnerability is the function sub445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

6.5CVSS0.03156EPSS
SaveExploits1References5
CVE
CVE
added 2026/05/11 9:30 p.m.32 views

CVE-2026-8344

The CVE describes a command injection in D-Link DIR-816 running 1.10CNB05_R1B011D88210. The vulnerability is in the function sub_445E7C of /goform/formDMZ.cgi, enabling remote execution of arbitrary commands. Several connected sources confirm remote exploitability and public availability of explo...

8.8CVSS6.4AI score0.03156EPSS
SaveExploits1References5Affected Software1
Circl
Circl
added 2026/05/11 9:27 p.m.15 views

CVE-2026-42872

creationtimestamp| type| source ---|---|--- 2026-05-11 21:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlm7okusjp2o...

6.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Circl
Circl
added 2026/05/11 9:25 p.m.15 views

CVE-2026-42887

creationtimestamp| type| source ---|---|--- 2026-05-11 21:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlm7lupnk52e...

4.5CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/11 9:14 p.m.43 views

CVE-2026-43897 Link Preview JS: vunerable to IPv6 and internal loopback attacks

Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved into an internal IP. This could cause internal data leaks. This vulnerability is fixed in 4.0.1...

8.7CVSS0.00536EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/11 9:14 p.m.26 views

CVE-2026-43897

CVE-2026-43897 affects the link-preview-js library. Prior to version 4.0.1, it did not validate IPv6 loopback addresses and could also resolve certain addresses to internal IPs via DNS, enabling potential internal data leaks when extracting link information. The vulnerability is fixed in version ...

8.7CVSS5.8AI score0.00536EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/11 9:14 p.m.10 views

CVE-2026-43897

Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved into an internal IP. This could cause internal data leaks. This vulnerability is fixed in 4.0.1...

8.7CVSS5.8AI score0.00536EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/05/11 9:14 p.m.11 views

CVE-2026-43897 Link Preview JS: vunerable to IPv6 and internal loopback attacks

Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was also a DNS attack, where an address could be resolved into an internal IP. This could cause internal data leaks. This vulnerability is fixed in 4.0.1...

8.7CVSS5.9AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/05/11 8:32 p.m.12 views

CVE-2026-43875 WWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account Takeover

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/MobileManager/oauth2.php completes an OAuth login by sending an HTTP 302 Location: oauth2Success.php?user=&pass= where is the victim's stored password hash md5hash"whirlpool", sha1password read directly fro...

6.8CVSS5.8AI score0.00285EPSS
SaveExploits0References2
Circl
Circl
added 2026/05/11 8:29 p.m.11 views

GHSA-J6CJ-RP87-MFRX

creationtimestamp| type| source ---|---|--- 2026-05-11 20:29:17+00:00| seen| https://gist.github.com/tw89Coder/cd011dc1842625f821c171e41e812fbc...

5.3AI score
SaveExploits0References1
Circl
Circl
added 2026/05/11 8:29 p.m.13 views

GHSA-Q9FQ-3RX9-7XCV

creationtimestamp| type| source ---|---|--- 2026-05-11 20:29:17+00:00| seen| https://gist.github.com/tw89Coder/cd011dc1842625f821c171e41e812fbc...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder