49925 matches found
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38417)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the getRoamingCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38409)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delStaticDhcpRules function. Attackers can exploit this vulnerability by sending a specially crafted PO...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38413)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the delWiFiScheduleCfg function. Attackers can exploit this vulnerability by sending specially crafted POST request...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38563)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setVpnPassCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38575)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from the setWiFiSignalCfg function not properly implementing access control mechanisms. Attackers can exploit this vulnerability by sending...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38573)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the setWiFiRepeaterCfg function. Attackers can exploit this vulnerability by sending a specially crafted...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38569)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control mechanism in the setWiFiEasyGuestCf function. Attackers can exploit this vulnerability by sending a special...
PT-2026-93822
Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description The SSE client-to-server POST endpoints are marked as @csrf exempt and the SSE GET stream endpoint lacks an Origin check. This allows a cross-origin page to manipulate a session authenticated by victim...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38431)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the setManualDialCfg function. Attackers can exploit this vulnerability by sending a specially crafted POS...
GHSA-2H44-8472-FRJJ
creationtimestamp| type| source ---|---|--- 2026-09-15 22:54:25+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvlprda2mw2w...
CVE-2026-83042
creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnkdqahp2g 2026-09-16 02:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm3sxp3u42y 2026-09-23 06:37:08+00:00| seen|...
CVE-2026-83037
creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnjcph452j 2026-09-16 00:00:20+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltgyvyop25 2026-09-23 09:48:49+00:00| seen|...
CVE-2026-83031
creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnikmkba2b 2026-09-15 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlsuuari52t 2026-09-23 09:49:01+00:00| seen|...
CVE-2026-82998
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlngbs75h2t 2026-09-15 23:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3mj4mn25 2026-09-23 09:50:06+00:00| seen|...
CVE-2026-82997
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfz37552j 2026-09-15 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3izjdq2y 2026-09-23 09:50:08+00:00| seen|...
CVE-2026-92000
creationtimestamp| type| source ---|---|--- 2026-09-15 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmqp54zu2m...
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...
CVE-2026-87287
creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljkoglcz2z...