CVE-2026-51867

agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...

cve-2026-34473-unauthenticated-dos-zte-routers

CVE-2026-34473: ZTEルーターにおける認証不要のサービス拒否（DoS）脆弱性（全世界14万台以上のデバイス、17機種以上に影響） CVE-2026-34473の技術的な内訳。元の開示セットおよびファームウェア解析成果物から公開。 ライブサイト： https://minanagehsalalma.github.io/cve-2026-34473-unauthenticated-dos-zte-routers/ このリポジトリの焦点： 巨大なapplication/x-www-form-urlencoded POSTリクエストによる認証不要のサービス拒否。...

CVE-2026-51867

The software agentgpt v.1.0.0 is vulnerable to Incorrect Access Control within the next/src/server/api/routers/agentRouter.ts component. The issue stems from an externally reachable path that accepts a caller-selected object or tenant identifier, allowing it to perform data-access operations with...

EUVD-2026-90415

agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...

CVE-2026-51867

agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

netgear-pwnagent

PwnAgent これはCVE-2023-24749（別名PwnAgent）のPoCです。Netgear RAXルーターにおけるワンクリックWAN側RCEです。 この脆弱性は、http://pwn.mahaloz.re にアクセスすることでトリガーできます。 説明 詳細な説明は、こちらのブログをご覧ください。...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and...

NETGEAR Routers - Remote Code Execution

NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow...

EUVD-2026-84529

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

CVE-2026-77637: Missing Authorization

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

PT-2026-96796

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.18.0 Description A privilege scope bypass exists in the admin API due to inconsistent middleware application in routers/router.go. While most state-changing admin tool routes require ScopeAdminWrite, the endpoints...

CVE-2026-90679: Use of Less Trusted Source

Forgejo 13.0.0 through 16.0.4, when "federation ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content modification. It does not verify that the HTTP Signature on an incoming ActivityPub activity was produced by the key belongin...

PT-2026-89893

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1 V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the sync server daemon on TCP port 13136. The daemon, which ru...

PT-2026-89894

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1 V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync server daemon on TCP port 13136. The daemon...

CVE-2025-9974

CVE-2025-9974 PoC !CAUTION This script is provided for educational and defensive research purposes only. It is designed strictly for use against owned hardware in isolated, sandboxed testing environments. Do not use this tool against systems you do not own or have explicit permission to test. The...