CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content. Mitigation...

enyx

enyx SNMP IPV6 列挙ツール - n3rdh4x0r -...

Linux Distros Unpatched Vulnerability : CVE-2026-87875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap...

PT-2026-89099

🚨 CVE-2026-87875 The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled...

CVE-2026-78630

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...

CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...

EUVD-2026-74182

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...

CVE-2026-78630

CVE-2026-78630 affects Okta Access Gateway due to improper input neutralization in SNMP configuration processing. Shell metacharacters in SNMP configuration values are not sanitized before a privileged script uses them to construct OS commands, allowing an authenticated local user with access to ...

cacti-rce-snmp-options-vulnerable-application

Cacti v1.2.24 認証済みコマンドインジェクション CVE-2023-39362 脆弱性アプリケーション これは Cacti の脆弱性 CVE-2023-39362 に対するエクスプロイトをテストするための脆弱性アプリケーションです。 警告! このアプリケーションには深刻なセキュリティ脆弱性が含まれています。自己責任で実行してください！バックアップがあり隔離された環境（最近のスナップショットとホストオンリーネットワークを備えたVMなど）の使用を推奨します。このアプリケーションをインターネットに接続されたサーバーにアップロードしないでください。侵害されます。 免責事項 :...

cisco-CVE-2023-20009

关于 安全研究员：ly1g3，ly1g3attuta.io GPG 指纹：https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概述：远程代码执行 - RCE from config file（由配置文件触发的远程代码执行） CVE：CVE-2023-20008 时间线： 发现 - ly1g3 上报 - ly1g3 修复 - Cisco Cisco AsyncOS 14.2.0 ESA（Cisco Secure Email）与 Cisco Secure Email a...

CVE-2025-20352

CVE-2025-20352 SNMP 暴露检测（onesixtyone + 解析器） 快速、安全的黑盒暴露检测 ，针对与 CVE-2025-20352 （SNMP 子系统）相关的 Cisco IOS/IOS XE 设备： 1. 使用 onesixtyone 配合默认 community 扫描子网中的 SNMP 服务。 2. 通过一个小型 Python 脚本解析 sysDescr.0 横幅，标记 Cisco IOS/IOS XE，并将版本标记为 已修复 （如果在白名单中）或 可能受影响 （需在 Cisco Software Checker 中确认）。 该项目不做任何利用 。它仅识别响应默...

Uncontrolled Resource Consumption in SNMP

...

LOYTEC L-IP BACnet/IP Routers Unchecked Input for Loop Condition (CVE-2026-55731)

The SNMP agent of a LOYTEC L-IP BACnet/IP router does not bound the loop condition it derives from an SNMP GETNEXT request's OID. An unauthenticated remote attacker can send a crafted GETNEXT request containing an oversized OID component to drive the agent into a long-running loop, exhausting CPU...

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 suffers from an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint. The backend fails to validate session cookies (a single Cookie: -http-session-=NOT_VALID header bypasses authentication), and the firmware install proce...

EUVD-2026-71267

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

FreeBSD : Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap (e9dfc357-a63f-11f1-9195-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e9dfc357-a63f-11f1-9195-4c526214c986 advisory. The Erlang/OTP project reports: OTP 29.0.6, 28.5.0.6 and 27.3.4.17 fix the following issues,...

CVE-2026-73570

CVE-2026-73570 PoC - Probador de Inyección de Comandos SMTP Un script personalizado de prueba de concepto PoC en Python de bajo nivel para probar vulnerabilidades de inyección de comandos SMTP CVE-2026-73570. Esta herramienta envía una dirección RCPT TO malformada que contiene sustitución de...

DEBIAN-CVE-2026-70405

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP snmp allows a remote attacker to degrade availability by sending an SNMP message containing a BER INTEGER whose length field is arbitrarily large. snmppdus:decintegernotag/1 defaults its size limit to infinity, and...