CVE-2026-11339

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may ...

CVE-2026-11339

A vulnerability affects D-Link DWR-M920 firmware up to version 1.1.50 . The flaw is located in the function sub_41CF20 within the file /boafrm/formUSSDSetup ; manipulating the argument ussdValue enables command injection . It can be exploited remotely, and multiple sources note that the exploit i...

CVE-2026-11339 D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may ...

EUVD-2026-34859

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may ...

GHSA-HJ85-PH9Q-78JG NocoDB: Stored Cross-Site Scripting via Form View Redirect URL

Summary The shared form-view submit handler in NocoDB writes the form's redirecturl to window.location.href after a same-host check that does not validate the URL scheme. A user with editor role or above on any base can plant a javascript: URL in the form's redirecturl; when an authenticated view...

CVE-2026-8714 Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTS...

CVE-2026-8714 Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTS...

EUVD-2026-34855

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTS...

CVE-2026-8714

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTS...

Cross-site Scripting (XSS)

Overview nocodb is a NocoDB Affected versions of this package are vulnerable to Cross-site Scripting XSS in the password reset. An attacker can execute arbitrary JavaScript in the context of the application by crafting a malicious password reset link and convincing a victim to follow it. This...

Chromium: CVE-2026-11017 Inappropriate implementation in Link Preview

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-48866

creationtimestamp| type| source ---|---|--- 2026-06-05 14:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87442 2026-06-05 15:00:18+00:00| published-proof-of-concept| Telegram/I55EnFdJmYEBchmRtkjPCUSn7qv5UvMe7YwNG8H83xOzV0w 2026-06-05 21:00:04+00:00| published-proof-of-concept...

CVE-2026-50263

creationtimestamp| type| source ---|---|--- 2026-06-05 13:43:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkbfracac2l 2026-06-06 22:39:02+00:00| seen| https://bsky.app/profile/xlibredev.bsky.social/post/3mnnpspspy22m 2026-06-06 22:39:03+00:00| seen|...

CVE-2026-11345

creationtimestamp| type| source ---|---|--- 2026-06-05 13:38:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkb4srq7w2o 2026-06-06 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mnmkxreul62r...

CVE-2026-50264

creationtimestamp| type| source ---|---|--- 2026-06-05 13:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkakvsphj2f 2026-06-06 02:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlkmeijlx2u 2026-07-13 06:40:09+00:00| seen|...

CVE-2026-11285

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608...

CVE-2026-11281

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11253

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11250

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-05 15:36:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkhql5hel22 2026-06-06 20:01:04+00:00| seen|...

CVE-2026-11236

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-06 21:02:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnnkf4uz2d2u 2026-06-07 18:00:00+00:00| seen|...