PT-2026-77098

Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...

CVE-2026-52481

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...

EUVD-2026-61280

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...

PT-2026-77292

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp actions function...

CVE-2026-52480

The SJRC F11 SJ-GPS-PRO drone, running firmware build 2019-09-17 , is vulnerable to an information disclosure flaw. A remote attacker can obtain sensitive information by interacting with the inetd service . Specifically, the research identifies unauthenticated FTP (running on port 21) as a primar...

CVE-2026-52481: Exposure of Sensitive Information to an Unauthorized Actor

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...

CVE-2026-52480: Missing Authentication for Critical Function

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

PT-2026-77291

Name of the Vulnerable Software and Affected Versions SJRC F11 SJ-GPS-PRO version 2019-09-17 Description An issue in the firmware allows a remote attacker to obtain sensitive information through the inetd service. The inetd Internet Services Daemon is a standalone network service that manages oth...

CVE-2026-52480

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Chaty Pro versions = 3.5.8...

Exploit for CVE-2026-73847

CVE-2026-73847 — emlog AI Assistant CSRF → SQL Execution → Adm...

SJ-GPS-PRO-F11-Vulnerability

Independent vulnerability research on the SJRC F11 series consum...

Exploit for CVE-2026-9830

CVE-2026-9830 BookingPress Pro API Assessment PoC This reposi...

CVE-2026-19901

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...

CVE-2026-19900

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The...

CVE-2026-19901

CVE-2026-19901 affects LB-LINK X-PRO 1.0.22-20231206. The vulnerability targets the file /etc/config/easycwmp, enabling manipulation that results in hard-coded credentials. It can be launched remotely and is described as high-severity with components affected including confidentiality, integrity,...

CVE-2026-19901 LB-LINK X-PRO easycwmp hard-coded credentials

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...

EUVD-2026-59777

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...

CVE-2026-19901

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...

CVE-2026-19901 LB-LINK X-PRO easycwmp hard-coded credentials

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...