CVE-2026-129445

A security flaw has been discovered in D-Link DIR-850L FW1.20WWb03. This impacts an unknown function of the file /usr/sbin/consolepwd of the component Console Login. Performing a manipulation results in hard-coded credentials. The attack requires a local approach. The exploit has been released to...

copyfail-deconstructed

copyfail-deconstructed Easy-to-understand version of CVE-2026-31431, a privilege escalation technique that allows anybody to become root. The original proof-of-concept is found here: https://github.com/theori-io/copy-fail-CVE-2026-31431, but is heavily compressed and minified so it can have as...

CVE-2026-129352

A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-657BRM firmware version 1.00.1 . The flaw is located in the unknown processing of the file /usr/sbin/upgrade_flash.cgi , where manipulating the argument boundary allows for remote execution. The vendor notes that the product h...

CVE-2026-37064

CVE-2026-37064 User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user...

CVE-2026-129352: TRENDnet TEW-657BRM: A vulnerability was detected in TRENDnet TEW-657BRM 1.00.1

A vulnerability was detected in TRENDnet TEW-657BRM 1.00.1. This issue affects some unknown processing of the file /usr/sbin/upgradeflash.cgi. Performing a manipulation of the argument boundary results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit ...

PT-2026-147438

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-657BRM version 1.00.1 Description A stack-based buffer overflow occurs during the processing of the /usr/sbin/upgrade flash.cgi endpoint. This issue is triggered by the manipulation of the argument boundary and can be exploited...

cve-2026-31431

CVE-2026-31431 This document describes a public Python exploit related to the CVE-2026-31431 vulnerability. The code demonstrates the exploitation of the flaw using primitives from the Linux AFALG subsystem, AEAD cryptographic operations, and memory manipulation via splice, with the goal of...

Linux-CopyFail-C-Version-CVE-2026-31431

Linux CopyFail- C Version - CVE-2026-31431 Clean C version of Copy Fail CVE-2026-31431 - Linux Local Privilege Escalation exploit using AFALG + authencesn + splice primitive. Overwrites the page cache of /usr/bin/su with a tiny setuid shellcode to gain root privileges. Educational proof-of-concep...

CVE-2026-126720

Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloudmanage, where a server-controlled JSON diagnoseParameter field is passed unsanitized to popen, enabling arbitrary command execution as root over cleartext HTTP when an attacker is positione...

CVE-2026-126720 CVE-2026-126720

Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloudmanage, where a server-controlled JSON diagnoseParameter field is passed unsanitized to popen, enabling arbitrary command execution as root over cleartext HTTP when an attacker is positione...

EUVD-2026-123581

Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloudmanage, where a server-controlled JSON diagnoseParameter field is passed unsanitized to popen, enabling arbitrary command execution as root over cleartext HTTP when an attacker is positione...

CVE-2026-126720

The Rooxis RXR-12 Wi-Fi router is vulnerable to unauthenticated remote code execution due to an input validation flaw in /usr/bin/cloud_manage . An attacker positioned on-path with access to the hard-coded cloud endpoint can exploit the unsanitized diagnoseParameter field passed to popen() via cl...

PT-2026-145281

Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloud manage, where a server-controlled JSON diagnoseParameter field is passed unsanitized to popen, enabling arbitrary command execution as root over cleartext HTTP when an attacker is position...

CVE-2026-126722: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon (/usr/bin/telnetd_startup) that, upon…

Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon /usr/bin/telnetdstartup that, upon receipt of a precomputed AES-128-CBC magic packet using a firmware-wide static key and IV, enables telnet service with default credentials, providing remote root access. Firmware...

CVE-2026-126720: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloud_manage,…

Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloudmanage, where a server-controlled JSON diagnoseParameter field is passed unsanitized to popen, enabling arbitrary command execution as root over cleartext HTTP when an attacker is positione...

CVE-2026-123014

iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the privileges of the logged-in user by inducing the user to open a crafted URL in iTerm2. Percent-encoded NUL characters survive input...

CVE-2026-122013

A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attac...

CVE-2026-122013

A path traversal vulnerability exists in the Multipart Parser component of Comfast CF-WR632AX version 2.6.0.1 . The flaw is located within an unknown functionality of the file /usr/bin/webmgnt , where manipulating the filename argument allows for remote path traversal. This vulnerability can be i...

CVE-2026-122013 Comfast CF-WR632AX Multipart webmgnt path traversal

A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attac...

EUVD-2026-117099

A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attac...