50661 matches found
CVE-2026-51610
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw within the RebootSystem function. This vulnerability allows unauthenticated attackers to arbitrarily force an immediate reboot of the device by sending a crafted POST request...
CVE-2026-51622
The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getWanCfg function. An unauthenticated attacker can obtain sensitive WAN configuration data by sending a crafted POST request to /cgi-bin/cstecgi.cgi. No specific exploit detail...
CVE-2026-51627
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw in the getIptvCfg function. An unauthenticated attacker can exploit this by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Successful exploitation allow...
CVE-2026-51647
The TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getCrpcCfg function. This vulnerability allows unauthenticated attackers to obtain cloud remote-control status and URL information by sending a crafted POST request to th...
CVE-2026-51657
The TOTOLINK T6 (version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw within the getSyslogCfg function. This vulnerability allows unauthenticated attackers to obtain sensitive syslog-related configuration details by sending a crafted POST request to the /cgi-bin/cstec...
EUVD-2026-67897
Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-83209
Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getCrpcConfig function allows unauthenticated attackers to obtain cloud remote-control status and URL information. This is achieved by sending a crafted POST...
CVE-2026-51610
Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to arbitrarily force an immediate reboot via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51630
Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS configuration, including domain, username, and password, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51663
Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
openSUSE 16 Security Update : liboqs (openSUSE-SU-2026:21634-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21634-1 advisory. Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand...
CVE-2026-53578
creationtimestamp| type| source ---|---|--- 2026-08-27 22:09:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3uevydce2e 2026-08-28 07:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4ubtmnvu2c...
CVE-2026-19092
creationtimestamp| type| source ---|---|--- 2026-08-27 22:08:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3uefzlzk2t 2026-08-28 08:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4vfmgy762j 2026-09-01 12:00:06+00:00| confirmed|...
CVE-2026-69543
creationtimestamp| type| source ---|---|--- 2026-08-27 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3ubafakl2c...
CVE-2026-81525
creationtimestamp| type| source ---|---|--- 2026-08-27 22:00:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdi7tx66oeqsz 2026-08-27 23:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3xbkhsju2z 2026-08-28 12:45:52+00:00| seen|...
CVE-2026-75325
creationtimestamp| type| source ---|---|--- 2026-08-27 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3tcscpy42j...
CVE-2026-81728
creationtimestamp| type| source ---|---|--- 2026-08-27 21:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3qkelswu2o 2026-09-01 14:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muhlrktkrh2w 2026-09-03 13:35:40+00:00| seen|...
GO-2026-6297 linx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service (DoS) via a crafted POST request in github.com/andreimarcu/linx-server
linx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service DoS via a crafted POST request in github.com/andreimarcu/linx-server...
CVE-2026-81699
creationtimestamp| type| source ---|---|--- 2026-08-27 19:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3jutedft2r 2026-08-31 20:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mufp45rg2u2r 2026-09-04 08:37:06+00:00| seen|...