75463 matches found
CVE-2026-68307: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectiter replays firmware state for links tracked in mvif-validlinks. After MLO link changes or MCU timeout recovery, the driver bitmap can...
CVE-2025-30241: Improper Neutralization of Special Elements used in an OS Command
Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system...
CVE-2026-66484: Improper Limitation of a Pathname to a Restricted Directory
GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the linktoname function without...
CVE-2025-30237: Missing Authorization
The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker can send specially crafted requests to bypass authentication and directly invoke privileged functionality without valid...
PT-2026-69440
Name of the Vulnerable Software and Affected Versions GNU cpio affected versions not specified Description Path Traversal exists in the tar archive extraction functionality. When extracting a tar archive in copy-in mode using the --no-absolute-filenames option, the extracted file name is...
PT-2026-69994
Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description TP-Link Aginet devices fail to properly validate symbolic links created on external USB storage devices. A symbolic link is a special type of file that serves as a reference to another...
PT-2026-69991
Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. This issue results from improper...
CVE-2025-30239: Use of Hard-coded Cryptographic Key
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. Successful exploitation may allow access to decrypted...
PT-2026-69993
Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain devices use hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data. An attacker with access to the device storage can recover these keys ...
VulnCheck KEV: CVE-2026-66464
Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...
PT-2026-69995
Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Certain web interface components fail to properly validate and sanitize user-supplied input before passing it to system-level command execution functions. This allows an authenticated...
PT-2026-69711
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7925 sta set decap offload function when updating the decap offload state for a Multi-Link Operation MLO station. The function iterates over the virtual interfac...
CVE-2026-71964: Improper Link Resolution Before File Access
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symbolic links. Attackers can exploit the application's failure t...
Linux Distros Unpatched Vulnerability : CVE-2026-66484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the...
PT-2026-69992
Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description Insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. This flaw enables an attacker to perform administrative actions...
Linux Distros Unpatched Vulnerability : CVE-2026-68197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiextdlsaddhtoper gates its follow-the-AP-bandwidth path on bssdesc-bcnhtcap being...
PT-2026-69597
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the mwifiex wireless driver. The function mwifiex tdls add ht oper checks for the presence of bss desc-bcn ht cap but subsequently dereferences bss...
CVE-2026-19368
creationtimestamp| type| source ---|---|--- 2026-08-09 22:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idhvgetbit6xd...
CVE-2021-30109
creationtimestamp| type| source ---|---|--- 2026-08-09 19:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97335 2026-08-10 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97335...