CVE-2026-40860

creationtimestamp| type| source ---|---|--- 2026-04-26 19:27:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbyr3nyr2v 2026-07-06 19:53:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyul5kuor2t 2026-07-13 22:00:05+00:00| seen|...

CVE-2026-40473

creationtimestamp| type| source ---|---|--- 2026-04-26 19:22:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbprwahy2v 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92636 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92636 2026-07-15...

CVE-2026-40048

creationtimestamp| type| source ---|---|--- 2026-04-26 19:16:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbeynghh22 2026-07-05 19:29:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwcpyu2zz2i 2026-07-13 22:00:07+00:00| seen|...

CVE-2026-33453

creationtimestamp| type| source ---|---|--- 2026-04-26 19:01:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgak33bo42j 2026-04-27 23:00:16+00:00| seen| Telegram/EQTkUVb0pfDYKQHtaBSXdUIdUPsDmdWPfXwKW7v0c9vw1iA 2026-04-28 03:00:06+00:00| seen|...

CVE-2026-27172

creationtimestamp| type| source ---|---|--- 2026-04-26 18:56:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgab3vjum2u 2026-07-13 22:00:11+00:00| seen| https://t.me/GithubRedTeam/92169 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92169 2026-07-14...

CVE-2026-7030

creationtimestamp| type| source ---|---|--- 2026-04-26 12:51:15+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkflu2lplo2w 2026-04-30 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkqb27wzhk2o...

CVE-2026-7027

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

CVE-2026-7026

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7027 D-Link DSL-2740R Wireless Setup Section cross site scripting

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

EUVD-2026-25702

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

CVE-2026-7027

A vulnerability identified in D-Link DSL-2740R EU_01.15 affects the Wireless Setup Section. The issue arises from manipulating the Wireless Network Name, causing cross-site scripting (XSS). The attack can be executed remotely, and a public exploit is available. Affected component: Wireless Setup ...

CVE-2026-7027 D-Link DSL-2740R Wireless Setup Section cross site scripting

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

nfc: llcp: add missing return after LLCP_CLOSED checks

...

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-7026

The CVE concerns D-Link DGS-3420 firmware 1.50.018 with a cross-site scripting vulnerability in the System Information Settings Page, caused by manipulation of the System Name argument. The issue allows remote exploitation and the exploit has been publicly disclosed. Supported metrics indicate CV...

CVE-2026-7025 Typecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery

A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Service Endpoint. The manipulation of the argument X-Pingback/link results in server-side request forgery. The attack may...

CVE-2026-7025 Typecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery

A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Service Endpoint. The manipulation of the argument X-Pingback/link results in server-side request forgery. The attack may...

CVE-2026-7025

Typecho up to 1.3.0 is affected by a server-side request forgery in the Ping Back Service Endpoint: the function Service::sendPingHandle (var/Widget/Service.php). The X-Pingback/link parameter manipulation triggers SSRF, enabling remote access. Exploit publicly available; vendor not responsive to...

D-Link DGS-3420 跨站脚本漏洞

The D-Link DGS-3420 is a managed Gigabit Ethernet switch designed for enterprise networks by D-Link Corporation. The version 1.50.018 of the D-Link DGS-3420 contains a cross-site scripting vulnerability. This vulnerability arises from improper handling of the System Name parameter in the System...