79789 matches found
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...
Exploit for CVE-2026-103663
CVE-2026-103663 Unauthenticated remote code execution in Olla...
CVE-2026-105810
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...
CVE-2026-105810
The TP-Link Tapo C320WS V2.0 is vulnerable to an authenticated stack-based buffer overflow within the local onboarding Wi-Fi configuration path. An authenticated attacker located on the adjacent network can submit a crafted request featuring an oversized encrypted password field to overwrite the ...
CVE-2026-105810 Authenticated Local Stack Overflow in TP-Link Tapo C320WS
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...
CVE-2026-105810 Authenticated Local Stack Overflow in TP-Link Tapo C320WS
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...
EUVD-2026-104523
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...
CVE-2026-106589
A flaw was found in OpenSSH. This vulnerability may allow privilege escalation on operating systems that lack support for file-descriptor passing and unprivileged terminal device allocation. In these environments, the session process unexpectedly retains administrative root privileges after user...
WAVLINK WL-WN530BE1-A has a command injection vulnerability
The WAVLINK WL-WN530BE1-A M30BE1V251117 and earlier versions have a command injection vulnerability. This vulnerability stems from the ios binary sub23B54 function, which passes the uncleaned fileid parameter of type=del in the request/protocol.csp?opt=ovpnfile to popen. A remote unauthenticated...
Froxlor Postback Link Vulnerability
Versions of Froxlor prior to 2.3.15 had a post-linkage vulnerability. This vulnerability stemmed from a symbolic link issue in the Statistics::makeChownWithNewStats function. Certified customers can exploit this vulnerability by using a root account to run a cron job that replaces the goaccess...
Advantech Adam-3600 command injection vulnerability
The Advantech Adam-3600 versions prior to 2.8.5.0 have a command injection vulnerability. This vulnerability stems from command injection, and it may allow authenticated attackers to execute root-level code on the system...
Eosphoros DB-GPT Authorization Issue Vulnerability
eosphoros DB-GPT versions 0.8.2 and earlier have an authorization issue vulnerability. This vulnerability stems from the /api/v1/chat/react-agent endpoint, which relies on a simulated getuserfromheaders function. This function grants administrative role to all callers. Unauthenticated attackers c...
Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779
Overview In early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments. The intrusion achieved root code executio...
ROOT-APP-PYPI-CVE-2023-43804 CVE-2023-43804 in urllib3 - Patched by Root
Root has patched CVE-2023-43804 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-37891 CVE-2024-37891 in urllib3 - Patched by Root
Root has patched CVE-2024-37891 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-45803 CVE-2023-45803 in urllib3 - Patched by Root
Root has patched CVE-2023-45803 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-H3HJ-CMCX-XC66 GHSA-h3hj-cmcx-xc66 in nodemailer - Patched by Root
Root has patched GHSA-h3hj-cmcx-xc66 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root
Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...