CVE-2025-26237

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

EUVD-2025-210768

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

CVE-2025-26237

The D-Link DI-7001 MINI_5G (version 19.10.31A1 ) is susceptible to a code execution vulnerability located in the flag parameter of the msp_info component. An attacker can exploit this flaw to execute arbitrary commands on the affected device. The vulnerability is categorized as Improper Neutraliz...

Linux p2pdma.c DoS

The vulnerability of the p2pdma.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux driver dpll core Heap Buffer Overflow DoS

The vulnerability of the drivers/dpll/dpllcore.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel verifier.c DoS

The vulnerability of the verifier.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel mcast module DoS

The vulnerability of the mcast module in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

gfs2 DoS

The vulnerability of the gfs2 component in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-59320

CVE-2026-59320...

PT-2026-95899

Name of the Vulnerable Software and Affected Versions D-Link R95 BE9500 version 1.00.16 Description An OS command injection flaw exists in the DHMAPI component of the device. The issue occurs when the NTPServer argument is processed by the system function within the /bin/ssi file. Because the inp...

Exploit for CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-L...

CVE-2026-74609

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlocked / if !l return; tipcnodewritelockn; if !tipclinkisestablishingl /...

Security Bulletin: MaaS360 mobile apps (iOS and Android) are able to bypass authentication by using deep link from the browser.

Summary MaaS360 mobile apps iOS and Android are able to bypass authentication by using deep link from the browser. Vulnerability Details CVEID:CVE-2023-42021 DESCRIPTION: The MaaS360 iOS application could allow an attacker to bypass authentication mechanisms by exploiting the password reset...

CVE-2026-74609 tipc: read le->link under the node lock in tipc_node_link_down()

In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link pointer before taking n-lock: struct tipclink l = le-link; / unlocked / if !l return; tipcnodewritelockn; if !tipclinkisestablishingl /...

CVE-2026-74609

CVE-2026-74609 is a use-after-free race condition in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem, specifically in tipc_node_link_down(). The function caches the le->link pointer before acquiring n->lock, then dereferences it under the lock. A concurrent delet...

CVE-2026-18052

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an...

EUVD-2026-64219

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an...

PT-2026-79510

Name of the Vulnerable Software and Affected Versions ManageWP Worker versions prior to 4.9.37 Description An authentication bypass exists because the plugin fails to bind the account being logged in to the signature that authorizes the login. Additionally, the system does not prevent the replay ...

CVE-2026-18052: Improper Authentication

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an...

PT-2026-79724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smc llc event handler function where the SMC LLC CONFIRM LINK and SMC LLC ADD LINK CONT branches store an incoming qentry into the local LLC flow without verifying...