CVE-2026-78049

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPCNodeMgtHelperInternalAddVariableNodeAttributes of the file src/ClientServer/addressspace/internal/sopcnodemgthelperinternal.c of the component AddNodes Service. The manipulation of the argument...

CVE-2026-78050 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78050 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...

CVE-2026-78049 Systerel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-bounds

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPCNodeMgtHelperInternalAddVariableNodeAttributes of the file src/ClientServer/addressspace/internal/sopcnodemgthelperinternal.c of the component AddNodes Service. The manipulation of the argument...

CVE-2026-78049

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPCNodeMgtHelperInternalAddVariableNodeAttributes of the file src/ClientServer/addressspace/internal/sopcnodemgthelperinternal.c of the component AddNodes Service. The manipulation of the argument...

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

Penetration Test Report WordPress Path Traversal - CVE-2019...

Exploit for CVE-2026-58231

CVE-2026-58231 Detection Script Detection and precondition-ve...

CVE-2026-77988

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77640

A flaw was found in tor. A remote attacker could send a specially crafted, truncated zlib/gzip stream. This could lead to an infinite loop during decompression, causing a denial of service DoS in the affected component. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77988

A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...

EUVD-2026-64252

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

CVE-2026-77946

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

CVE-2026-77945

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

CVE-2026-77946

A stack-based buffer overflow in the NTP Timezone Configuration Handler of TRENDnet TEW-821DAP firmware 2.2.01b05 allows remote, unauthenticated attackers to achieve full system compromise (CVSS 10.0 CRITICAL). The vulnerable function is uci_safe_get in /cgi-bin/apply_time.cgi ; manipulating the ...

CVE-2026-77946 TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

EUVD-2026-64247

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

EUVD-2026-64245

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

CVE-2026-77945 TRENDnet TEW-821DAP ssi upload.cgi command injection

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...