CVE-2026-40111

creationtimestamp| type| source ---|---|--- 2026-04-09 10:01:19+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v7px-3835-7gjx 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-09 23:30:43+00:00|...

GHSA-42XW-2XVC-QX8M

creationtimestamp| type| source ---|---|--- 2026-04-09 09:46:45+00:00| seen| https://gist.github.com/podhmo/d72566411eddd2d13a2e11b9b06e9d7c...

CVE-2026-5854

creationtimestamp| type| source ---|---|--- 2026-04-09 07:39:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2cinfgnd2j 2026-04-09 08:17:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2emvj2ql2z 2026-04-09 09:15:57+00:00| published-proof-of-concept|...

CVE-2026-5853

creationtimestamp| type| source ---|---|--- 2026-04-09 07:39:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2cifymxh2s 2026-04-09 08:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2evtxrk32i 2026-04-09 09:15:57+00:00| published-proof-of-concept|...

CVE-2026-5844

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5844

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5844 D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5844

The CVE-2026-5844 entry describes a vulnerability in D-Link DIR-882 (firmware 1.01B02) affecting the HNAP1 SetNetworkSettings handler, specifically the prog.cgi function sprintf. Manipulating the IPAddress argument triggers an OS command injection, with remote exploitation possible. Public exploi...

CVE-2026-5844 D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file prog.cgi of the component HNAP1 SetNetworkSettings Handler. The manipulation of the argument IPAddress results in os command injection. The attack may be performed from remote. The exploit has been...

CVE-2026-5836

creationtimestamp| type| source ---|---|--- 2026-04-09 04:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizy624wpt2s...

CVE-2026-5837

creationtimestamp| type| source ---|---|--- 2026-04-09 04:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizxm573fh2o 2026-04-09 05:15:27+00:00| published-proof-of-concept| Telegram/qm3ZDWS3OwUpmw9ncg5iRXx1aqT9bGCn0-RoRVSAPQoeyYE...

CVE-2026-34185

creationtimestamp| type| source ---|---|--- 2026-04-09 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4901/ 2026-04-09 10:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2mqgrzzd22 2026-04-09 11:16:38+00:00| seen|...

EUVD-2026-20809

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgimain of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only...

EUVD-2026-20757

A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction...

EUVD-2026-20769

parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen shell command, allowing arbitrary command execution via crafted .lnk filenames containing shell metacharacters. An attacker can craft a .lnk filename wi...

CVE-2026-25462

creationtimestamp| type| source ---|---|--- 2026-04-09 00:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizkj6bdel2o...

CVE-2026-5815

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgimain of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only...

CVE-2026-5173

creationtimestamp| type| source ---|---|--- 2026-04-09 00:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizja35rgk2t 2026-04-09 01:28:16+00:00| published-proof-of-concept| Telegram/XRvc7f-x7KgmkvO7GcbaizI94C7ZhNHc5jsbe-dfAO5iAWk 2026-04-09 04:36:02+00:00| seen|...

PT-2026-31745

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

PT-2026-31585

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 version 1.01B02 Description A flaw exists in the sprintf function within the prog.cgi file of the HNAP1 SetNetworkSettings Handler component. Manipulation of the IPAddress argument can lead to operating system command injection...