TOTOLINK/Realtek Routers - CAPTCHA Bypass

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...

APatch

APatch Android 内核与 Android 系统的补丁方案。 一种全新的基于内核的 Android 设备 root 解决方案。 APM：支持类似 Magisk 的模块。 KPM：支持可将任意代码注入内核的模块（提供内核函数 inline-hook 和 syscall-table-hook）。 APatch 依赖于 KernelPatch。 APatch UI 和 APModule 源代码衍生自 KernelSU 并进行了修改。 下载最新 APK 的唯一途径是 Releases 页面。 支持的版本 仅支持 ARM64 架构。 仅支持 Android 内核版本 3.18 - 6.1...

CVE-2020-11539

CVE-2020-11539：Tata Sonata 智能手环存在不当访问控制 信息 描述： 已识别出该智能手环没有配对（BLE 安全级别模式 0），空中传输的数据未加密。此外，发送到智能手环的数据没有任何身份验证或签名验证，使得任何攻击者都能控制智能设备的参数。 影响版本： Smart SF Rush - 1.12 研究人员： Sayli Ambure https://twitter.com/sayliambure MITRE CVE 链接： https://vulners.com/cve/CVE-2020-11539 概念验证漏洞利用 描述...

CVE-2025-55182

🛡️ CVE-2025-55182 - 了解并缓解漏洞 🚀 快速开始 欢迎来到 CVE-2025-55182 项目。本指南将帮助您了解该漏洞，并提供下载和运行所需软件的步骤。 📥 下载应用程序 🔍 什么是 CVE-2025-55182？ CVE-2025-55182 是一种可能允许远程代码执行（RCE）的安全漏洞。这意味着攻击者可能未经授权控制系统。我们的工具提供了该漏洞的演示和说明，对于希望保护系统安全并了解潜在安全风险的用户来说极具价值。 ⚙️ 系统要求 要运行 CVE-2025-55182 应用程序，请确保您的系统满足以下最低要求： 操作系统： Windows 10...

CVE-2026-69315

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2026-68842

CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module , where sensitive system information is exposed to an unauthorized control sphere. An authorized attacker with local access and low privileges can disclose confidential information, with high impact to co...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-67267

Dell Command Update (DCU) versions prior to 5.7.1 are affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve information disclosure , with no user interaction required. T...

CVE-2026-73669

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

CVE-2026-6373

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

CVE-2026-6373 Sensitive Data Exposure in Zyxel WAH7601 Router

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

EUVD-2026-55620

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

CVE-2026-6373

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

CVE-2026-6373 Sensitive Data Exposure in Zyxel WAH7601 Router

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

EUVD-2026-48449

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...

CVE-2026-28698

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...

CVE-2026-28698 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...