TOTOLINK/Realtek Routers - CAPTCHA Bypass

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...

CVE-2025-55182

🛡️ CVE-2025-55182 - 脆弱性の理解と緩和 🚀 はじめに CVE-2025-55182 プロジェクトへようこそ。このガイドでは、この脆弱性について理解し、必要なソフトウェアをダウンロードして実行する手順を説明します。 📥 アプリケーションのダウンロード 🔍 CVE-2025-55182 とは? CVE-2025-55182 は、リモートコード実行 RCE...

APatch

APatch Android カーネルと Android システムのパッチ適用。 Android デバイス向けの新しいカーネルベースの root ソリューション。 APM: Magisk に似たモジュールをサポート。 KPM: カーネルに任意のコードを注入できるモジュールをサポート（カーネル関数 inline-hook と syscall-table-hook を提供）。 APatch は KernelPatch に依存しています。 APatch UI と APModule のソースコードは KernelSU から派生・改変されています。 最新の APK をダウンロードする唯一の方法は...

CVE-2020-11539

CVE-2020-11539: Tata Sonata Smartband における不適切なアクセス制御 情報 説明: スマートバンドにはペアリングがなく（BLE セキュリティレベル モード 0）、無線で送信されるデータは暗号化されていないことが確認されています。さらに、スマートバンドに送信されるデータには認証や署名検証がないため、攻撃者なら誰でもスマートデバイスのパラメータを制御できてしまいます。 影響を受けるバージョン: Smart SF Rush - 1.12 研究者: Sayli Ambure https://twitter.com/sayliambure MITRE CVE...

CVE-2026-69315

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2026-68842

CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module , where sensitive system information is exposed to an unauthorized control sphere. An authorized attacker with local access and low privileges can disclose confidential information, with high impact to co...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-67267

Dell Command Update (DCU) versions prior to 5.7.1 are affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve information disclosure , with no user interaction required. T...

CVE-2026-73669

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

CVE-2026-6373

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

CVE-2026-6373 Sensitive Data Exposure in Zyxel WAH7601 Router

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

CVE-2026-6373

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

CVE-2026-6373 Sensitive Data Exposure in Zyxel WAH7601 Router

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

EUVD-2026-55620

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

EUVD-2026-48449

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...

CVE-2026-28698

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...

CVE-2026-28698 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...