CVE-2026-25741

Zulip is an open-source team collaboration tool. Prior to commit bf28c82dc9b1f630fa8e9106358771b20a0040f7, the API endpoint for creating a card update session during an upgrade flow was accessible to users with only organization member privileges. When the associated Stripe Checkout session is...

PT-2022-11233

Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description A denial of service issue exists in the cgiserver.cgi Upgrade API functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. An attacker can exploit th...

CVE-2021-40405: Improper Access Control

A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

Reolink RLC-410W cgiserver.cgi Upgrade API Denial of Service Vulnerability

Reolink Rlc-410W is a Wifi security camera from Reolink China. A denial of service vulnerability exists in the Reolink RLC-410W v3.0.0.136 20121102 version, which stems from the cgiserver.cgi Upgrade API doing the right thing with incoming error messages, which can be triggered by an attacker by...

Reolink Rlc-410W 访问控制错误漏洞

Reolink Rlc-410W is a Wifi security camera from Reolink China. A denial of service vulnerability exists in the Reolink RLC-410W v3.0.0.136 20121102 version, which stems from the cgiserver.cgi Upgrade API doing the right thing with incoming error messages, which can be triggered by an attacker by...

PT-2018-13524

Name of the Vulnerable Software and Affected Versions PESCMS Team version 2.2.1 Description The issue allows attackers to upload and execute arbitrary PHP code. This can be achieved by uploading a ZIP archive containing a .php file through the "/Public/?g=Team&m=Setting&a=upgrade" API endpoint...