CVE-2026-25858

creationtimestamp| type| source ---|---|--- 2026-02-08 00:00:56+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032067514723066 2026-02-08 10:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medq3l2nc724 2026-02-08 10:30:46+00:00| seen|...

PT-2026-6943

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in D-Link DIR-823X version 250416 related to the processing of input for the file /goform/set ac status. Manipulation of the ac ipaddr, ac ipstatus, and ap randtime arguments can lead to...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath12kdpmonrxparsestatustlv function in the drivers/net/wireless/ath/ath12k/dpmon.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker...

CVE-2026-23738

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2015

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...

GHSA-VHVQ-FV9F-WH4Q

creationtimestamp| type| source ---|---|--- 2026-02-07 02:40:06+00:00| seen| https://gist.github.com/alon710/8323d7b3849b55718473864a8e9cc2a6...

CVE-2026-25544

creationtimestamp| type| source ---|---|--- 2026-02-06 22:16:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7wmw6fh723 2026-02-07 14:00:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mebldrpbyd24 2026-02-07 14:00:25+00:00| seen|...

CVE-2026-2068

creationtimestamp| type| source ---|---|--- 2026-02-06 22:16:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7wmpdgbd2a...

EUVD-2026-5645

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...

CVE-2026-23738

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...

CVE-2026-23738

CVE-2026-23738 affects Asterisk; prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user-supplied cookie/GET parameter values are echoed into the HTML of the /httpstatus page without escaping, enabling reflected XSS. The issue is mitigated by upgrading to the patched series (20.7...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056 D-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

EUVD-2026-5661

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056

CVE-2026-2056 affects D-Link DIR-605L/DIR-619L routers (versions 2.06B01/2.13B01). The vulnerability resides in an unknown function in the file /wan_connection_status.asp of the DHCP Connection Status Handler, enabling information disclosure. Remote exploitation is possible and the exploit has be...

CVE-2026-2056

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2056 D-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of the file /wanconnectionstatus.asp of the component DHCP Connection Status Handler. The manipulation leads to information disclosure. Remote exploitation of th...

CVE-2026-2015

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...