75 matches found
EUVD-2026-84683
LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords are stored as reversible hashes in /etc/shadow, recoverable using dictionary-based cracking tools. Attackers can use the recovered credentials to authenticate via Telnet or SSH and obtain...
EUVD-2026-82989
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...
CVE-2025-55182-Terminal
Next.js RSC 脆弱性スキャナー CVE-2025-66478 / CVE-2025-55182 軽量でマルチスレッドのProof of Concept（PoC）ツールで、Next.js React Server Components（RSC）のリモートコード実行脆弱性（React2Shell）を検出・実証するために設計されています。このツールは、単一ターゲットの検証と高並列な大量スキャンの両方を可能にします。 特徴 精密な検出 : 厳格なルートレベル実行アクセスを検証することで脆弱なインスタンスを特定します。 大量スキャン :...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 ⚠ This tool is created solely for education...
CVE-2026-42372
The CVE pertains to D-Link DIR-605L Hardware Revision A1 (End-of-Life). It describes a hardcoded telnet backdoor: at boot, a telnet daemon starts via /bin/telnetd.sh using the username "Alphanetworks" and a static password read from /etc/alpha_config/image_sign. The custom telnetd accepts a -u us...
CVE-2026-4156 ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability
ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex EV chargers. Authentication is not required to exploit this...
PT-2026-23036
Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall ASA Software and Secure FTD Software affected versions not specified Description A flaw exists in the Cisco FXOS Software CLI feature that may allow a local attacker with administrative access to execute arbitrary command...
EUVD-2020-24485
Malware in sbrugna...
EUVD-2018-1255
Malware in sbrugna...
EUVD-2021-21373
Malware in sbrugna...
EUVD-2024-50434
Malicious code in bioql PyPI...
EUVD-2024-36455
Malicious code in bioql PyPI...
EUVD-2022-37389
Malicious code in bioql PyPI...
EUVD-2022-25926
Malicious code in bioql PyPI...
EUVD-2024-20005
Malicious code in bioql PyPI...
EUVD-2022-34393
Malicious code in bioql PyPI...
Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20290)
The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...
CVE-2025-34151 Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection
A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. The input is passed directly to system-level commands without sanitation, enabling unauthenticated attackers to achieve root-level code...
PT-2025-32045 · Kenwood · Kenwood Dmx958Xr
Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows attackers with physical access to execute arbitrary code on affected Kenwood DMX958XR devices. The flaw resides in the firmware update process due to insufficient...
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the lack of measures to neutralize substitution characters or identical symbols. This allows attackers to elevate their privileges to the root level.
The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the lack of measures taken to neutralize substitution characters or identical symbols. Exploiting this vulnerability can allow attackers to elevate their privileg...