CVE-2020-9373

Netgear R6400 router UPnP daemon (upnpd) contains a stack buffer overflow in the handling of SSDP M-SEARCH requests over UDP port 1900 (unsafe strcpy). Affected architecture is ARM with uClibc. Impact: remote code execution or DoS as described in public exploit research and PoC references. Public...

CVE-2023-30000

CVE-2023-30000 is accompanied by a GitHub PoC exploiting a race in the Linux kernel’s nft_tables path (nft_counter_destroy) that targets modprobe_path. The PoC instructions show building a binary on Ubuntu 23.04 (Lunar Lobster) and configuring a built-in profile for Ubuntu kernel packages linux-i...

CVE-2025-30374

CVE-2025-30374 is associated with Taipy (v4.0.3) and is tied to a class pollution vulnerability . The root cause is improper handling of client-supplied attribute paths in Taipy’s state management, via a recursive _set/attr mechanism, allowing an attacker to overwrite methods on objects (e.g., _T...

CVE-2026-98198

Technical details for CVE-2026-98198 are not publicly available in the provided documents; a PoC exists elsewhere, but no product, impact, or remediation details are disclosed here. Monitor for updates.

CVE-2026-59774

Technical details are not publicly available in the provided documents; no affected product, root cause, impact, or remediation is disclosed. Monitor for updates.

CVE-2026-5432

CVE-2026-5432 is not just a reserved candidate; connected data describes a concrete vulnerability in a Node.js GraphQL setup (Express-GraphQL with sqlite3) where SQL is built by concatenating field aliases into the SELECT clause. The exploit demonstrates that using batching and crafted aliases ca...

CVE-2026-7777

CVE-2026-7777 describes a Rust web server that uses unsafe code to share a buffer across threads via a Mutex-wrapped Vec. The root cause is a use-after-free: a raw pointer to the Vec data is obtained inside a locked guard, the lock is dropped, another thread can replace and free the Vec, and the ...

CVE-2026-0101

CVE-2026-0101 affects BLE peripherals that use Resolvable Private Addresses (RPA). The connected exploit document demonstrates a replay-based impersonation: a attacker observes a valid RPA and, lacking a replay cache or lifetime enforcement, reuses the same RPA to reconnect as the trusted device....

CVE-2026-3030

CVE-2026-3030 is a prototype pollution vulnerability in a Node.js API that uses a vulnerable deepMerge function for JSON patches. By sending keys like proto in a patch, an attacker can pollute Object.prototype, adding or overriding properties such as isAdmin and enabling privilege escalation. A c...

CVE-2026-7878

CVE-2026-7878 is an eBPF verifier bug in Linux kernels where 32-bit arithmetic bounds are not properly truncated, enabling type confusion that can let unprivileged users craft eBPF programs to read/write arbitrary kernel memory, causing local privilege escalation. Affected details in provided doc...

CVE-2026-6789

CVE-2026-6789 is illustrated in the connected exploit: a stack-based buffer overflow in the certificate SAN parser of an embedded TLS library (simulated). The vulnerability occurs in parsing the Subject Alternative Name extension: the ext_len length field is misused, allowing overflow when copyi...

CVE-2026-16475

CVE-2026-16475 is evidenced by a PoC for OCSinventory (OCS Inventory NG) where Local File Inclusion exists in the /ajax/teledeployoptions.php endpoint due to improper sanitization of the linkedoptions parameter. Affected version in the exploit is 2.12.4, with unauthenticated remote attacker able ...

CVE-2023-28615

Technical details for CVE-2023-28615 are not publicly provided in the supplied documents. No affected products, vulnerable components, root cause, or remediation are described here. Monitor for updates.

CVE-2023-31443

CVE-2023-31443 is evidenced by a GitHub exploit describing a local directory traversal/ race condition in the NorduGrid arc package. Specifically, nordugrid-arc-wn 6.14.0 contains the arc-job-cgroup SUID binary with a vulnerable main() path where ncopied = snprintf(cgroup_path, FILENAME_MAX, "%s%...

CVE-2023-31711

CVE-2023-31711 shows up in connected data via a GitHub exploit note for ZKTECO devices. The root cause is reported as incorrect access control in the administrative API, enabling remote attackers to read arbitrary files via the API. The included exploit description demonstrates commands like get_...

CVE-2023-38820

CVE-2023-38820 is evidenced by a GitHub exploit targeting Slack v4.33.73, enabling local arbitrary code execution via DLL loading. The issue arises through loading of multiple DLLs (profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll, MSASN1.dll, mf.dll, mfplat.dll, RTWorkQ.DLL) where a malicious DL...

CVE-2026-53921

CVE-2026-53921 is an OpenWrt odhcpd (DHCPv6) flaw described across connected documents: two independent pre-authentication overflow paths in the DHCPv6 request-processing path cause a stack buffer overflow in a 512-byte buffer when handling crafted IA options. An unauthenticated attacker sending ...

CVE-2026-53625

Technical details for CVE-2026-53625 are not publicly provided in the supplied documents; no affected products, impact, or remediation are specified. Monitor for updates from authoritative sources.

CVE-2026-65971

CVE-2026-65971: SQL injection in PowerGrid’s Livewire integration (power-components/livewire-powergrid). Triggered when sortDirection is attacker-controlled and sortField is an empty string, bypassing Laravel validation in the Sorting pipeline and reaching an orderByRaw sink that embeds the value...

CVE-2026-50055

Zimbra 10.1.20 patches include a fix for CVE-2026-50055, described as a mail forwarding restriction bypass that could allow authenticated users to exfiltrate email despite forwarding restrictions. The THN article also notes multiple other fixes (including SNMP command injection and four XSS flaws...