CVE-2026-102294 Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

EUVD-2026-90974

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...

CVE-2026-102294

The TP-Link TL-WR841N router is susceptible to an authenticated OS command injection vulnerability within the IPv6 WAN configuration . The root cause is the improper incorporation of a crafted IPv6 Gateway value into a system command. This allows an authenticated administrator to execute arbitrar...

Kernel-Exploits

Kernel Exploits Repository for kernel exploits...

os-experiment-4

os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...

PT-2026-103951

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N affected versions not specified Description An authenticated OS command injection exists in the IPv6 WAN configuration. This occurs when a crafted value provided to the IPv6 Gateway is improperly incorporated into a system...

Check Point Gaia Operating System (sk1000171)

The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk1000171 advisory. - A path traversal and arbitrary file upload vulnerability in Check Point Security Management Server, Multi-Domain Security Management Server,...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789466646)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789466646 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetti...

CVE-2026-102120

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run operating system commands with elevated privileges on another node of the same cluster. Insufficient input validation in ...

CVE-2026-95313

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox due to a use-after-free vulnerability in the Fullscreen component, where previously released memory is improperly accessed. By enticing a user to open a specially crafted...

PT-2026-103553

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description A privilege escalation issue exists in clustered deployments where an attacker with existing code execution on one node can execute operating system commands with elevated privileges on...

PT-2026-103575

Name of the Vulnerable Software and Affected Versions Kiteworks appliance affected versions not specified Description A system notification template on the Kiteworks appliance is processed by a template engine that evaluates expressions within the stored template body. This allows an authenticate...

CVE-2026-76736

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

CVE-2026-76721

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the...

CVE-2026-100308

Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, use...

ROOT-OS-ALPINE-318-CVE-2023-49285 CVE-2023-49285 in squid - Patched by Root

Root has patched CVE-2023-49285 in the squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root

Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root

Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...

ROS-20260929-73-0184

The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...

PT-2026-102871

🚨 CVE-2026-76727 Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a...