D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

HijackLibs

HijackLibs This project aims to keep a record of publicly disclosed DLL Hijacking opportunities. You can find the web version of this repository on https://www.hijacklibs.net. Licence : GPLv3.0 Code of Conduct : Contributor Covenant Contribution guide YAML Schema used by the project Sample YAML...

CVE-2018-10467

CVE-2018-10467 Timeline 2018-04-06: Discovered 2018-04-13: Retest on staging environment 2018-04-16: Internal communication 2018-04-27: Vendor notification 2018-04-27: Vendor feedback 2018-05-27: Technical clarifications of the product 2018-05-03: Added instructions to fix the issue from the vend...

fortigate-belsen-leak

╔═════════════════════════════════════════════════════════════════════════════╗ ║ ███████╗ ██████╗ ██████╗ ████████╗██╗ ██████╗ █████╗ ████████╗███████╗ ║ ║ ██╔════╝██╔═══██╗██╔══██╗╚══██╔══╝██║██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝ ║ ║ █████╗ ██║ ██║██████╔╝ ██║ ██║██║ ███╗███████║ ██║ █████╗ ║ ║...

Public_Poc

0xmrsecurity.github.io Personal Blog web Page Thoughts I learn and write the public proof of concepts for the better understanding of hacking and programming skills...

CVE

Security Research Public vulnerability reports by JunZ-Leo. Published CVE reports Both records below are published in the CVE List and credit JunzLeo VulDB User as the reporter. They were published on April 28, 2025. CVE| Affected product| Component| Vulnerability type| Research report...

CVE-2019-11707-PoC

CVE https://vulners.com/cve/CVE-2019-11707...

Vulnerability-Disclosure-Policy

Vulnerability Disclosure Policy We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must participate in co-ordinated vulnerability disclosure. When Enable Security discovers vulnerabilities through its own research, it will notify vendors of these...

CVE-2026-51833-Public-Disclosure

This repository does not have a README...

Astra Linux – Vulnerability in libarchive

A vulnerability was discovered in libarchive up to version 3.7.7. It has been classified as problematic. This issue affects the function list of the bsdunzip.c file. The vulnerability leads to a null pointer dereference. The attack can be launched on the local host. The exploit has been disclosed...

CVE-2026-37008

creationtimestamp| type| source ---|---|--- 2026-09-13 23:05:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvgphnxdtu2b 2026-09-14 00:03:14+00:00| seen| https://gist.github.com/ichintu/66ee5056fb951ebe1cfdbe3d6efa4dc0 2026-09-14 04:00:44+00:00| seen|...

CVE-2026-65615

creationtimestamp| type| source ---|---|--- 2026-09-13 14:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102203 2026-09-14 00:00:13+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102203 2026-09-14 03:00:06+00:00| seen|...

CVE-2026-90647

creationtimestamp| type| source ---|---|--- 2026-09-12 23:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w 2026-09-13 00:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117260788422772028 2026-09-13 00:00:42+00:00| seen|...

CVE-2026-84308

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q97c-8qh3-fpc6...

EUVD-2026-72252

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settingsedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to t...

CVE-2020-3766

creationtimestamp| type| source ---|---|--- 2026-09-06 15:00:03+00:00| published-proof-of-concept| Telegram/43D4qhGTDojIuKxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag 2026-09-07 01:00:11+00:00| published-proof-of-concept| Telegram/43D4qhGTDojIuKxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag...

CVE-2026-83524

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

CVE-2026-82857

creationtimestamp| type| source ---|---|--- 2026-08-31 10:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mueniwgefj25 2026-08-31 10:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muenwpvjrw25...

CVE-2026-34308

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:04+00:00| published-proof-of-concept| Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots 2026-08-28 00:00:48+00:00| published-proof-of-concept| Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots...

CVE-2026-78676

creationtimestamp| type| source ---|---|--- 2026-08-25 02:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtuqyskh5o2y 2026-08-25 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117153911650352822 2026-08-25 03:00:28+00:00| seen|...