74650 matches found
CVE-2026-98313 drm/msm/dp: skip PUSH_IDLE when the link was never enabled
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...
CVE-2026-98313 drm/msm/dp: skip PUSH_IDLE when the link was never enabled
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...
CVE-2026-77806
exp.py link instruction scan.py link...
CVE-2026-11834
CVE-2026-11834 PoC TP-Link DHCP Option 66 Unauthenticated RCE CVE-2026-11834 Overview A command injection vulnerability CWE-78 in the DHCP Option 66 "TFTP Server Name" handling of TP-Link router firmware allows an unauthenticated attacker on the same network segment to execute arbitrary commands ...
CVE-2025-9961
CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE Overview Stack-based buffer overflow in CWMP TR-069 leading to remote code execution. Field| Value ---|--- Product| TP-Link AX10, AX1500 Affected| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC...
thm-Moniker-Link-cve-2024-21413-writeup
TryHackMe: Moniker Link CVE-2024-21413 ะััั: Cyber Security 101 โ Exploitation Basics โ Moniker Link CVE-2024-21413 ะกะปะพะถะฝะพััั: Premium-ะบะพะผะฝะฐัะฐ ะขะตะผะฐ: ะะฑั ะพะด Protected View ะฒ Outlook, ััะตัะบะฐ NTLM-ั ััะตะน ะธ ะฟะตัะตั ะฒะฐั ััััะฝัั ะดะฐะฝะฝัั ั ะฟะพะผะพััั Responder CVE-2024-21413 โ ะบัะธัะธัะตัะบะฐั ััะทะฒะธะผะพััั Microsoft...
CVE-2020-10882
Reference links https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...
PT-2026-106849
TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP TP-Link Device Protocol daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service condition. Successful exploitation may all...
PT-2026-107224
With migrations ALLOWED DOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOW LOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...
PT-2026-106851
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...
PT-2026-106850
TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...
Cisco ASA Cross-site Scripting (CVE-2020-3580)
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...
Cisco ASA/FTD Cross-site Scripting (CVE-2020-3583)
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...
Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3528)
A vulnerability in the OSPF Version 2 OSPFv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...
ROS-20261006-73-0194
The vulnerability of the scorecvframe function in the Linux operating system is related to a violation of the count of links to pages displayed in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
PT-2026-106642
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH IDLE when the link was never enabled msm dp display atomic enable returns early when link training fails, leaving -power on false and the main link down. msm dp display atomic disable nevertheless writes DP...
Linux Distros Unpatched Vulnerability : CVE-2026-98313
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main...
CVE-2026-41091
๐ก๏ธ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...
CVE-2026-105696
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and...
CVE-2026-105693
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...