CVE-2026-10125 Edimax BR-6478AC POST Request formPPPoESetup stack-based overflow

A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack can be...

CVE-2018-25424 Gate Pass Management System 2.1 SQL Injection via login-exec.php

Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login and password parameters. Attackers can submit crafted POST requests to login-exec.php with SQL injection payloads in form...

WordPress Advanced Custom Fields (ACF®) plugin <= 6.8.1 - Unauthenticated Arbitrary Post Modification vulnerability

Unauthenticated Arbitrary Post Modification vulnerability discovered by Sarawut Poolkhet MisterHelloz in WordPress Plugin Advanced Custom Fields versions = 6.8.1...

Internal-Penetration-Test-Report-Web-Exploitation-Post-Exploitation-Using-Metasploit-

Internal-Penetration-Test-Report-Web-Exploitation-Post-Exploit...

PT-2026-45129

A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack may be initiated remotely. The exploit has...

PT-2026-45089

Name of the Vulnerable Software and Affected Versions Spectra Gutenberg Blocks – Website Builder for the Block Editor versions prior to 2.19.26 Description The plugin is susceptible to Remote Code Execution, allowing authenticated attackers with Contributor-level access or higher to execute code ...

Edimax BR-6478AC 安全漏洞

The Edimax BR-6478AC is a dual-band Gigabit router produced by Edimax Corporation. Version 1.23 of the Edimax BR-6478AC contains a security vulnerability. This vulnerability stems from a function called formPPPoESetup in the component POST Request Handler. The function’s handling of the parameter...

Edimax BR-6478AC 命令注入漏洞

The Edimax BR-6478AC is a dual-band Gigabit router produced by Edimax Corporation. The Edimax BR-6478AC version 1.23 has a command injection vulnerability. This vulnerability stems from the operation of the formStaDrvSetup function in the component POST Request Handler, specifically the parameter...

CVE-2026-45613

creationtimestamp| type| source ---|---|--- 2026-05-29 22:23:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzlahikt42i...

Sequence of Processor Instructions Leads to Unexpected Behavior

Overview admidio/admidio is a free open source user management system for websites of organizations and groups. Affected versions of this package are vulnerable to Sequence of Processor Instructions Leads to Unexpected Behavior through the fielddelete process. An attacker can permanently remove...

CVE-2026-48555

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjx5wbwy2h...

CVE-2026-44422

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwzys5f23 2026-05-30 12:02:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116663420594857571...

CVE-2026-44421

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwskan22d 2026-07-22 15:02:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mralqohnlq2y...

CVE-2026-46599

creationtimestamp| type| source ---|---|--- 2026-05-29 21:57:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjr6anon23 2026-07-06 08:02:31+00:00| seen| https://gist.github.com/alon710/b509de249400d70367353eccad7c34f4...

CVE-2026-48810

creationtimestamp| type| source ---|---|--- 2026-05-29 21:54:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjls6xuq2q...

CVE-2026-46385

creationtimestamp| type| source ---|---|--- 2026-05-29 21:49:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjcgcjw427...

CVE-2026-44825

creationtimestamp| type| source ---|---|--- 2026-05-29 21:32:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmzieoqu7j2u 2026-06-01 09:37:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116674176977845715 2026-06-01 12:40:19+00:00| seen|...

CVE-2026-45628

creationtimestamp| type| source ---|---|--- 2026-05-29 21:03:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzgr7rw7j2d 2026-05-30 16:02:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn3gevmjrn2w 2026-08-10 20:02:04+00:00| seen|...

CVE-2026-44285

creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgna3yio2v...

CVE-2026-45632

creationtimestamp| type| source ---|---|--- 2026-05-29 20:43:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzfnfqmcj2s 2026-05-30 04:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mn262lpag62r...