CVE-2026-101072 Netcore NR289-GE CGI ap_ip.cgi system os command injection

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101072

A vulnerability exists in Netcore NR289-GE 1.4.5102 within the CGI Handler component. Specifically, the /ap_ip.cgi file fails to properly handle the ip argument, which can lead to remote OS command injection . This vulnerability can be exploited over the network. An exploit is publicly available ...

CVE-2026-101071 Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2026-101071

The Acrel Electric Unet Web Service (up to version 20260814 ) is vulnerable to an unrestricted upload vulnerability within the Upload Endpoint . The flaw resides in the /exchange/attachment/upload file, where manipulation of the File argument allows for remote unauthorized uploads. Public exploit...

CVE-2026-101071 Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

EUVD-2026-88288

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update

A flaw was found in the libceph component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free...

EUVD-2026-88255

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334

Canonical LXD versions 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms are vulnerable to a path traversal flaw in the CLI client image export and copy functionality. A remote malicious or machine-in-the-middle image server can exploit this by sending a crafted Content-Disposition h...

CVE-2026-86334 CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2018-9995-EXPLOIT

CVE-2018-9995 - DVR認証バイパス このリポジトリは、CVE-2018-9995として識別されるセキュリティ脆弱性に対処するものです。この脆弱性は、TBK DVR4104、DVR4216、Novo、CeNova、QSee、Pulnix、XVR 5 in 1、Securus、Night OWL、DVR Login、HVR Login、MDVR Loginなど、さまざまなDVRデバイスに影響を及ぼします。これらのデバイスは、元のTBK...

CVE-2026-101066

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101069

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed...

CVE-2026-101067

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...

CVE-2026-101055

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GETSTATUS of the component TCP Service. The manipulation of the argument wifiinfo results in information disclosure. The attack can be executed remotely. The exploit has been...

EUVD-2026-88253

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

CVE-2026-101070 dbgate Files Endpoint runners.js files path traversal

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

CVE-2026-101070

The software dbgate (up to version 7.3.1 ) contains a path traversal vulnerability within the Files Endpoint component. The flaw exists in the files function of the packages/api/src/controllers/runners.js file, where the manipulation of the runid argument allows for unauthorized file system acces...

CVE-2026-52749

The Kaon AR2140X router is vulnerable to an authentication bypass because it improperly issues session cookies in responses to unauthenticated HTTP requests. This flaw allows a remote attacker to obtain a valid session identifier without credentials. Once authenticated, an attacker can perform un...

CVE-2026-52749 Improper Authentication in Kaon AR2140X

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perfor...