EUVD-2026-68510

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

CVE-2026-82695 Tenda AC18 Telnet telnet missing authentication

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

EUVD-2026-68509

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2026-82695

A missing authentication flaw affects the Telnet Handler component (file /goform/telnet) in Tenda AC18 firmware version 15.03.05.19 , allowing a remote attacker to access the device without credentials. The flaw is rated CVSS 4.0 base score 10.0 (CRITICAL) with low attack complexity, no privilege...

CVE-2026-82694

Tenda AC1206 (firmware 15.03.06.23) is affected by a missing authentication vulnerability in the Web UI component. The vulnerable function is R7WebsSecurityHandler in the file /goform/ate , allowing a remote, unauthenticated attacker to manipulate it. The CVSS 3.1 score is 10.0 (Critical) with ch...

CVE-2026-82694 Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...

EUVD-2026-68507

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...

EUVD-2026-68503

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsimgr.cgi. Performing a manipulation of the argument alias/username/password/volumelocation results in os command injection. It is possible to initiate the attack remotely...

CVE-2026-82679

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

CVE-2026-82680

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82680

D-Link DSM-G600 version 1.01 is affected by an out-of-bounds write vulnerability in the Multipart Handler component of the /load_file.cgi endpoint. A remote attacker with low privileges can trigger this memory corruption without user interaction, potentially compromising the confidentiality, inte...

CVE-2018-10467

CVE-2018-10467 Timeline 2018-04-06: Discovered 2018-04-13: Retest on staging environment 2018-04-16: Internal communication 2018-04-27: Vendor notification 2018-04-27: Vendor feedback 2018-05-27: Technical clarifications of the product 2018-05-03: Added instructions to fix the issue from the vend...

EUVD-2026-68460

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

CVE-2026-82679 diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

CVE-2026-82677

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82857

creationtimestamp| type| source ---|---|--- 2026-08-31 10:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mueniwgefj25 2026-08-31 10:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muenwpvjrw25...

CVE-2026-45258_1day_LPE_exploit

This repository does not have a README...

CVE-2026-82667 yaojingang GEOFlow GenericHttpEndpointResolver.php DistributionController.isValidHttpEndpoint server-side request forgery

A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function DistributionController.isValidHttpEndpoint of the file app/Services/GeoFlow/GenericHttpEndpointResolver.php. Such manipulation of the argument endpointurl leads to server-side request forgery. It is possibl...

CVE-2026-82630

A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnection of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/TestController.java of the component Transport Endpoint. The manipulatio...

CVE-2026-82631

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...