49716 matches found
PT-2026-93789
Name of the Vulnerable Software and Affected Versions rmcp versions prior to 2.0.0 Description The stateful Streamable HTTP server in the rmcp crate contains a memory leak that can lead to a Denial of Service. An unauthenticated remote attacker can exploit this by sending a well-formed JSON-RPC...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38569)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control mechanism in the setWiFiEasyGuestCf function. Attackers can exploit this vulnerability by sending a special...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38413)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the delWiFiScheduleCfg function. Attackers can exploit this vulnerability by sending specially crafted POST request...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38577)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setWizardCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38417)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the getRoamingCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38411)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delVlanCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST reque...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38575)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from the setWiFiSignalCfg function not properly implementing access control mechanisms. Attackers can exploit this vulnerability by sending...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38409)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delStaticDhcpRules function. Attackers can exploit this vulnerability by sending a specially crafted PO...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38566)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the setWiFiAdvancedCfg function. Attackers can exploit this vulnerability by sending a specially crafted...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38408)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delSmartQosCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38424)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setAccessDeviceCfg function. Attackers can exploit this vulnerability by sending a specially crafted PO...
GHSA-2H44-8472-FRJJ
creationtimestamp| type| source ---|---|--- 2026-09-15 22:54:25+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvlprda2mw2w...
CVE-2026-83042
creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnkdqahp2g 2026-09-16 02:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm3sxp3u42y 2026-09-23 06:37:08+00:00| seen|...
CVE-2026-83037
creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnjcph452j 2026-09-16 00:00:20+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltgyvyop25 2026-09-23 09:48:49+00:00| seen|...
CVE-2026-83031
creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnikmkba2b 2026-09-15 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlsuuari52t 2026-09-23 09:49:01+00:00| seen|...
CVE-2026-82998
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlngbs75h2t 2026-09-15 23:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3mj4mn25 2026-09-23 09:50:06+00:00| seen|...
CVE-2026-82997
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfz37552j 2026-09-15 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3izjdq2y 2026-09-23 09:50:08+00:00| seen|...
CVE-2026-92000
creationtimestamp| type| source ---|---|--- 2026-09-15 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmqp54zu2m...
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...