tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation

Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. id: CVE-2026-1368 info: name: Video Conferencing with Zoom API 4.6.6 -...

CVE-2026-114175

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-114175 WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerability

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-114175

The eRoom WordPress plugin (versions

EUVD-2026-108028

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-114176

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-114176 WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

EUVD-2026-107424

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-114176

The DigitalME eRoom WordPress plugin (specifically the eroom-zoom-meetings-webinar component) is vulnerable to a Missing Authorization flaw in versions up to and including 1.7.1 . This vulnerability allows attackers to exploit incorrectly configured access control security levels , potentially le...

Zoom-dll-hijacking

Zoom-dll-hijacking A dll hijacking vulnerability in zoom meeting 5.1.3 Affected Windows version Windows 7 or less Windows Server 2008 Any other windows system that doesn't have SHCore.dll present. Usage Copy the dbghelper.dll and SHCore.dll to following location...

EUVD-2026-104643

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...

CVE-2026-105814

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...

CVE-2026-105814 Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...

CVE-2026-105814

The TP-Link Tapo C210 (V3.60) contains an authentication bypass vulnerability within the DS JSON API . The root cause is an order-dependent flaw where a crafted JSON request combining a protected operation with public onboarding-related fields causes inconsistent module-level authorization checks...

Zoom Rooms 7.0.x < 7.1.7 Improper Certificate Validation (ZSB-26021)

The version of Zoom Rooms installed on the remote host is 7.0.x prior to 7.1.7. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information...

Zoom Workplace 7.0.x < 7.1.9 / 7.2.0 Improper Certificate Validation (ZSB-26021)

The version of Zoom Workplace installed on the remote host is 7.0.x prior to 7.1.9 / 7.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...

Zoom Workplace VDI Client 7.0.11 < 7.0.13 Improper Certificate Validation (ZSB-26021)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.13. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...