CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

CVE-2026-76584

A stack-based buffer overflow exists in the alphapd component of the TRENDnet TV-IP751WIC network camera (firmware 11.03.03), specifically in the file /cgi-bin/admin/set_time.cgi. The vulnerability is triggered by manipulating the Currenttime argument and can be exploited remotely with low privil...

CVE-2026-76583

TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.

EUVD-2026-62852

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has...

CVE-2026-76582

TRENDnet TEW-821DAP firmware 2.2.01b05 passes the unsanitized ipaddr argument from /cgi-bin/ping.cgi to popen/system in the ssi component, enabling remote command injection; a proof-of-concept exploit is publicly available on GitHub. No patch or workaround is mentioned in the provided documents.

CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: kubescape, skaffold-fips, docker-cli-buildx-fips, podman, falcoctl, buildkitd-fips, ctop-fips, falcoctl-fips, skaffold, docker-fips, kaniko-fips, kubescape-server-fips, podman-fips, buildah, telegraf, kaniko, openbao-fips, buildah-fips, buildkitd, docker-cli-buildx,...

CVE-2026-16872

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-62846

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...

CVE-2026-76576 yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argumen...

EUVD-2026-62836

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...

CVE-2026-61302

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu6ytvvxke2y...

CVE-2026-70822

creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70746

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muacqysanm2u...

CVE-2026-71150

creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:35+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtzpju6zgf22...

CVE-2026-70674

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60961

creationtimestamp| type| source ---|---|--- 2026-08-19 17:15:56+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70699

creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70778

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

CVE-2026-20177 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...