cisco-security-research

Cisco 安全研究 研究员： 0xReadingSteiner 联系方式： [email protected] 厂商： Cisco Systems, Inc. 厂商通知时间： 2026-08-04 Cisco PSIRT, ZDI, SSD 厂商回应： 无 为什么会有这项研究 针对市面上可购买的 Cisco 产品的独立安全研究，已在多个产品线中发现严重漏洞——包括企业依赖的语音通信、协作和网络安全系统。 发布前曾进行多次协调尝试： 17 份提交 至 Zero Day Initiative ZDI — 未处理 SSD 暂停了所有 Cisco 漏洞收购，并表示 Cisco...

CVE-2026-6377

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service Management allows Path Traversal. This issue affects CSM Customer Service Management: from 6.8.9 before 8.0.3...

EUVD-2026-71088

A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument apikeyapi.user leads to improper privilege management. The attack may be...

EUVD-2026-60037

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpconchecksessionurl of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and ma...

EUVD-2026-60002

A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and ma...

EUVD-2026-60001

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

CVE-2026-19959

The vulnerability CVE-2026-19959 affects Edimax EW-7478APC with firmware 1.04, targeting the formWanTcpipSetup function. Crafted input to pppUserName leads to a stack-based buffer overflow in /goform/formWanTcpipSetup, enabling remote exploitation. Public exploit code exists, increasing risk of n...

EUVD-2026-59777

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...

CVE-2026-19901

CVE-2026-19901 affects LB-LINK X-PRO 1.0.22-20231206. The vulnerability targets the file /etc/config/easycwmp, enabling manipulation that results in hard-coded credentials. It can be launched remotely and is described as high-severity with components affected including confidentiality, integrity,...

CVE-2026-19900

CVE-2026-19900 affects LB-LINK X-PRO 1.0.22-20231206. The vulnerability is in an unknown function of the /etc/shadow file, leading to hard-coded credentials. Exploitation can be initiated remotely, with high attack complexity and a HIGH impact on confidentiality, integrity, and availability. Expl...

GHSA-MQJF-5F49-2FJH

creationtimestamp| type| source ---|---|--- 2026-08-15 11:02:42+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jk4pjf22r 2026-08-15 11:02:42+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3mt4jjzzdl22r 2026-08-15 11:02:43+00:00| seen|...

PT-2026-73041

Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description A security flaw exists in the /etc/config/easycwmp file that allows for the use of hard-coded credentials. This issue can be exploited remotely, although the attack is considered highly complex...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19745

Technical details for CVE-2026-19745 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-19189

Technical details are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-53697

A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of the file /dm/dispatch/user/findAll. Executing a manipulation of the argument Name can lead to sql injection. It is possible to launch the attack...

EUVD-2026-52160

A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Password can lead to os command injection. The attack may be launched remotely. This attack is characterized by high...

CVE-2026-15521

A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an unknown function of the file build/server.cjs of the component updatenodefromfile. The manipulation of the argument filePath leads to path traversal. An attack has to be approached locally. The exploit is...

CVE-2026-15488

The CVE affects hcr707305003 shiroiAdmin versions 1.1/1.3 where FileController.php (FileController::upload) can be manipulated to trigger an unrestricted file upload. This could be exploited remotely. A public exploit exists. Upgrade to version 1.4 to address the issue (patch 3ecde28ea8a20a3840db...

PT-2026-51253

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK versions prior to 3.7.1 Description A heap-based buffer overflow can occur in the XMLNode::parseFile function within the ofstd/libsrc/ofxml.cc library. This issue allows a remote attacker to execute a manipulation that leads to the...