74705 matches found
CVE-2026-101066
The software dbgate (versions up to 7.3.1 ) is vulnerable to a path traversal vulnerability within the Archive Link Creation component. Specifically, the createLink function in the file packages/api/src/controllers/archive.js fails to properly handle the linkedFolder argument. This flaw allows an...
USN-8831-1: libvirt vulnerabilities
It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-18917 It was discovered that libvirt did not correctly handle symbolic links wh...
USN-8831-1 libvirt vulnerabilities
It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-18917 It was discovered that libvirt did not correctly handle symbolic links wh...
Exploit for CVE-2026-93958
CVE-2026-93958 — D-Link R95 BE9500 DHMAPI / NTPServer Pytho...
CVE-2026-101913: Incorrect Comparison
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe80::/10 IPv6 link-local range. An attacker-controlled address elsewhere in fe80::/10 can...
CVE-2026-91204: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a javascript: URI link that survives HTML comment formatting and can execute script in the browser of a visitor who clicks it...
CVE-2026-87799: Improper Link Resolution Before File Access
Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...
PT-2026-99895
Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0 through 4.0.13 Canonical LXD versions 5.0 through 5.0.9 Canonical LXD versions 5.21 through 5.21.7 Canonical LXD versions 6.0 through 6.9 Description Improper link resolution in the migration receive path allows an...
ROS-20260928-73-0082
The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server implementation in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260928-73-0052
The vulnerability of the fs/ocfs2 component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-101081: Stack-based Buffer Overflow
A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...
PT-2026-102355
Name of the Vulnerable Software and Affected Versions ZoAP versions 1.8.0 through 1.9.x Description The CoAP link-format helper match path uri in subsys/net/lib/coap/coap link format.c contains an out-of-bounds read. The issue occurs when comparing a registered resource path against a URI in a...
PT-2026-99926
Name of the Vulnerable Software and Affected Versions D-Link DI-8400 version 16.07 Description A flaw in the Web Administration Service allows for a remote stack-based buffer overflow. This occurs when the opt argument is manipulated within the menu nat more asp function of the menu nat more.asp...
CVE-2026-101066: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...
PT-2026-99894
Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0.2 through 4.0.13 Canonical LXD versions 5.0.0 through 5.0.9 Canonical LXD versions 5.1.0 through 5.21.7 Canonical LXD versions 6.0.0 through 6.9 Description Improper link resolution in the recursive file pull feature...
PT-2026-99861
Name of the Vulnerable Software and Affected Versions dbgate versions prior to 7.3.2 Description A path traversal issue exists in the Archive Link Creation component. A remote attacker can manipulate the linkedFolder argument within the createLink function located in the...
The vulnerability of TP-Link Archer VX1800v V1’s microprogramming software lies in the failure to implement measures to eliminate CRLF sequences. This allows attackers to alter user account roles and gain administrator privileges.
The vulnerability of TP-Link Archer VX1800v V1 microprogramming software is related to the lack of measures taken to eliminate CRLF sequences. Exploiting this vulnerability allows a remote attacker to alter account roles and gain administrator privileges...
CVE-2026-77770
CVE-2026-77770 miniOrange 2FA CVE POC miniOrange 2FA（WordPress 插件 miniorange-2-factor-authentication）≤ 6.3.0 — 通过电子邮件验证链接（userID / Txid / accessToken）实现未认证的任意 WordPress 选项删除。 仅限授权测试。请勿对您不拥有或未获授权测试的系统运行此工具。 要求： Python 3，仅使用标准库。 python3 cve-2026-77770-miniorange-2fa-option-delete.py -u http://TARGE...
DCS932L-Emulation-CVE-2024-37606-Attack
エミュレーションを再び簡単に ようこそ！このリポジトリは、D-Link DCS-932L ファームウェアをエミュレートし、CVE-2024-37606 の脆弱性を実証するためのツールと環境を提供します。パッチ適用済みのバイナリと必要なライブラリが含まれており、Ghidra などのツールを使った手動パッチ適用を必要とせず、エミュレーションのセットアップを簡略化します。 CVE-2024-37606 このプロジェクトには、CVE-2024-37606 の概念実証エクスプロイト CVE-2024-37606-DCS932L.py が含まれています。この脆弱性は、alphapd...