EUVD-2026-17761

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the...

CVE-2026-4947

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:36+00:00| seen| Telegram/jyatwHTsuiD0gHBEYEMrZjBra-amFrxPGWmF0zTmxDIL8I 2026-04-01 05:16:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifwqza4sr27...

CVE-2026-35037

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:31+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-cqgf-f4x7-g6wc 2026-04-06 18:21:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mituyphtjk22 2026-04-06 19:29:09+00:00| see...

CVE-2026-35036

creationtimestamp| type| source ---|---|--- 2026-04-01 03:18:22+00:00| published-proof-of-concept| https://github.com/lin-snow/Ech0/security/advisories/GHSA-wc4h-2348-jc3p 2026-04-06 17:19:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitriwnmtc2w 2026-04-06...

CVE-2026-3780

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the...

CVE-2026-34547

creationtimestamp| type| source ---|---|--- 2026-04-01 02:09:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmdyrvnp24...

CVE-2026-34554

creationtimestamp| type| source ---|---|--- 2026-04-01 02:07:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifmafyw4l2z...

CVE-2026-34549

creationtimestamp| type| source ---|---|--- 2026-04-01 02:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifm52eyga22...

EUVD-2026-17688

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function...

The vulnerability of the q6v5_alloc_memory_region() function in the drivers/remoteproc/qcom_q6v5_mss.c module of the Linux kernel’s remote processor subsystem support driver allows a attacker to cause a service failure.

The vulnerability of the q6v5allocmemoryregion function in the drivers/remoteproc/qcomq6v5mss.c module of the Linux kernel’s remote processor subsystem support driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_link_inc() function in the kernel/bpf/syscall.c module, which is part of the Linux operating system’s BPF interpreter support, allows a hacker to cause a service failure.

The vulnerability of the bpflinkinc function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

D-Link多款产品 访问控制错误漏洞

D-Link DNS-120, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have a vulnerability related to access...

CVE-2026-30526

CVE-2026-30526 affects SourceCodester Zoo Management System v1.0. The vulnerability is located on the login page in the msg parameter, where user-supplied content is echoed back without proper HTML encoding/sanitization, enabling a reflected XSS via a crafted URL. The connected documents confirm ...

PT-2026-29554

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

PT-2026-29614

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the...

LightGuard: Transparent WiFi Security Via Physical-Layer LiFi Key Bootstrapping

WiFi is inherently vulnerable to eavesdropping because RF signals may penetrate many physical boundaries, such as walls and floors. LiFi, by contrast, is an optical method confined to line-of-sight and blocked by opaque surfaces. We present LightGuard, a dual-link architecture built on this...

PT-2026-29599

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav...

PT-2026-29552

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

PT-2026-29512

Dell AppSync, versions 4.6.0, contains an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

PT-2026-29553

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...