K000163541: ip-address library vulnerability CVE-2026-42338

Security Advisory Description ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group and Address6.link do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and...

CVE-2023-42426

CVE ID: CVE-2023-42426 Tipo de Vulnerabilidad: Cross-Site Scripting Descripción: La vulnerabilidad de Cross-site scripting XSS en Froala Froala Editor v.4.1.1 permite a atacantes remotos ejecutar código arbitrario a través del parámetro 'Insertar enlace' en el componente 'Insertar imagen'. Pasos...

cve-2026-8697

CVE-2026-8697: Omisión del Límite de Tasa de Inicio de Sesión en TP-Link Archer C64 CVE-2026-8697 es un fallo lógico en el sistema operativo del TP-Link Archer C64 llamado TPOS en el mensaje de depuración. Permite a cualquier usuario no privilegiado conectado al router omitir el límite de tasa de...

CVE-2024-33111

CVE-2024-33111 Los routers D-Link DIR-845L con versión 1.01KRb03 e inferiores son vulnerables a Cross Site Scripting XSS a través de /htdocs/webinc/js/bscsmsinbox.php. Componente vulnerable /htdocs/webinc/js/bscsmsinbox.php Detalles técnicos La vulnerabilidad se debe a la falta de filtrado en el...

CVE-2023-33781

CVE-2023-33781 Description D-Link DIR-842V2 v1.0.3 was discovered to allow a user to run an arbitrary binary when connecting to telnet. This vulnerability can be triggered using backup/restore functionality. Proof of concept...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

CVE-2022-25062

CVE-2022-25062 This script exploits a vulnerability IoF in the TPLink WR840N router, using a field for injecting code in the module DNS...

luadec-tplink

luadec-tplink Modified luadec version to decompile TP-Link Archer C7 LUA firmware. Not all opcodes are working but still enough to use for reverse engineering...

ROS-20261005-73-0024

The vulnerability in rsync relates to the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2026-106056

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

VulnCheck KEV: CVE-2024-23625

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

ROS-20261005-73-0022

The vulnerability in rsync relates to the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261005-73-0032

The vulnerability in rsync relates to the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261005-73-0015

The vulnerability of the Rsync file transfer and synchronization utility is related to the tracking of symbolic links in UNIX systems. Exploiting this vulnerability could allow an attacker to read arbitrary files...

ROS-20261005-73-0033

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

ROS-20261005-73-0031

The vulnerability in rsync relates to the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Arbitrary file read via the convert_playwright_script prompt in mcp-k6

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

CVE-2026-105693: Missing Authorization

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

PT-2026-106004

The convert playwright script prompt in the k6 MCP server accepts a file path as its playwright script argument. Paths given in the documented '@'-prefixed form are restricted to the server's current working directory, but a bare path is resolved by a separate undocumented code path that applies ...

PT-2026-106213

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the delete-share-link RPC where the system verifies only if the caller has permission to edit the parent file, failing to confirm if the caller created the share link or possesses...