65935 matches found
PT-2026-35274
Name of the Vulnerable Software and Affected Versions D-Link DIR-822 A 101 Description A command injection issue exists in the udhcpd DHCP Service within the system function of the /udhcpcd/dhcpd.c file. A remote attacker can exploit this by manipulating the Hostname argument to execute arbitrary...
PT-2026-35207
A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...
PT-2026-35229
A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argument NewPortMappingDescription results in buffer overflow. The attack needs to be approached within...
D-Link DSL-2740R 跨站脚本漏洞
The D-Link DSL-2740R is a high-performance ADSL router from D-Link Corporation. The D-Link DSL-2740R EU01.15 version has a cross-site scripting vulnerability. This vulnerability stems from improper handling of the Wireless Network Name parameter by the Wireless Setup Section component, which may...
PT-2026-35208
A vulnerability was identified in D-Link DSL-2740R EU 01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...
PT-2026-35228
A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack can only be initiated within the local network. The exploit is publicly available and might be used...
UNIX Symbolic Link (Symlink) Following
Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the WebDAV backend process. An attacker can access and modify files outside the intended directory by exploiting symbolic links that point outside the designated root. This is only exploitable if...
zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write
Summary The zrok WebDAV drive backend davServer.Dir restricts path traversal through lexical normalization but does not prevent symlink following. When a symbolic link inside the shared DriveRoot points to a location outside that root, remote WebDAV consumers can read files and—on shares without...
CVE-2026-4142
creationtimestamp| type| source ---|---|--- 2026-04-25 19:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdrtpj3at2c...
CVE-2026-4280
creationtimestamp| type| source ---|---|--- 2026-04-25 18:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdoigax452s...
CVE-2026-6041
creationtimestamp| type| source ---|---|--- 2026-04-25 15:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdegkpr5b2x...
CVE-2026-5757
creationtimestamp| type| source ---|---|--- 2026-04-25 14:17:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mkda6kaxwz2n 2026-05-07 14:21:50+00:00| seen| https://bsky.app/profile/ai-sight.bsky.social/post/3mlbg25s2eo26 2026-05-18 18:18:06+00:00| seen|...
CVE-2026-5820
creationtimestamp| type| source ---|---|--- 2026-04-25 13:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkd5pzeqdv2h...
CVE-2026-41481
creationtimestamp| type| source ---|---|--- 2026-04-25 12:54:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116465444548754974...
GHSA-6FW5-F8R9-FGFM
creationtimestamp| type| source ---|---|--- 2026-04-25 11:36:33+00:00| seen| https://gist.github.com/dims/bd766118ae32d646ea9f127ac51c3054...
CVE-2026-41476
creationtimestamp| type| source ---|---|--- 2026-04-25 10:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464772166042640...
CVE-2026-31650
creationtimestamp| type| source ---|---|--- 2026-04-25 05:23:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116463671145457300...
CVE-2026-41248
creationtimestamp| type| source ---|---|--- 2026-04-24 22:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjlxyitp2w 2026-04-25 00:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkbqdc3r752v 2026-04-25 00:00:46+00:00| seen|...
CVE-2026-41478
creationtimestamp| type| source ---|---|--- 2026-04-24 22:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjlqme3z2n 2026-04-28 16:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkkxq6o5ex2w 2026-04-28 16:07:10+00:00| seen|...