CVE-2026-71905 DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

CVE-2026-71906 DrayTek VigorAP Multiple Models OS Command Injection via setLan

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71904 DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the eventcode field is concatenated into a system command. A remote attacker can trigger this vulnerabili...

CVE-2023-27372

CVE-2023-27372 Die Sicherheitslücke besteht im Parameter oubli und ermöglicht es einem nicht authentifizierten Benutzer, beliebige Befehle mit den Rechten des Webserver-Benutzers auszuführen. Betroffen sind die Branches 3.2, 4.0, 4.1 und 4.2. Anfällige Versionen sind solche unter 3.2.18, unter...

Malicious code in web-advertising (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c0c1f060691740d5149c61d74f3ddd8f6e10107c7621d700ae0819a1e2237 [email protected] declares scripts.preinstall = 'node index.js', so index.js executes automatically on npm install. The script collects...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – Variante Zero-Day di SharePoint Sfruttata per RCE Completa Una critica escalation da CVE‑2025‑49706 Di Aditya Bhatt – Red Team | VAPT 📌 In Breve CVE‑2025‑53770 è una vulnerabilità critica CVSS 9.8 RCE senza autenticazione in Microsoft SharePoint ora attivamente sfruttata in...

CVE-2026-76071 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-78414

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Sfruttamento di base che abusa di CVE-2020-3452 per enumerare i file standard accessibili nella directory web dei dispositivi CISCO ASA/FTD. Utilizzo: Per impostazione predefinita utilizza un elenco di file costruito da output di esempio di CVE-2018-0296 nel Metasploit...

DEBIAN-CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require...

EUVD-2026-64858

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

CVE-2026-78376

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

CVE-2026-78376

A use-after-free vulnerability in WebKitGTK is triggered by processing malicious web content, caused by improper memory handling of JSCValue function parameters , leading to memory corruption. The flaw carries a CVSS 3.1 score of 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. ...

CVE-2026-78376 Webkitgtk: use-after-free of jscvalue function parameters

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

ROOT-APP-MAVEN-CVE-2026-22732 CVE-2026-22732 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2026-22732 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

pfsense-security-research

Lettura arbitraria di file autenticata in pfSense 2.8.0 tramite interfaccia web di diagnostica CVE ID: CVE-2025-53392 Data: 2025-06-27 Autore: Seth Kraft Homepage del fornitore: https://www.netgate.com/ Changelog del fornitore:...

CVE-2019-11539

CVE-2019-11539 Scoperta originale: Orange Tsai, Meh Chang Autori: Justin Wagner, Alyssa Herrera Ringraziamenti a: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Descrizione della vulnerabilità Nelle versioni di Pulse Secure Pulse Connect Secure 9.0RX precedenti alla 9.0R3.4, 8.3RX precedenti alla...

bom-view

BOM View Eine einfache, statische Webanwendung zum Anzeigen von Softwareabhängigkeiten aus Software-Stücklisten SBOM-Dateien. Als statische Seite kann sie problemlos auf jedem statischen Webhosting-Dienst wie GitLab Pages, GitHub Pages oder Netlify gehostet werden. Funktionen SBOM-Viewer : Zeigt...