|
451
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unknown part of the file /user of the component User Management Handler. This manipu…
New
|
CWE-266 CWE-285
Incorrect Privilege Assignment Improper Authorization
|
CVE-2026-9409
|
2026-05-25 11:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
452
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipul…
New
|
CWE-119 CWE-120
Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow
|
CVE-2026-9403
|
2026-05-25 08:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
453
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argum…
New
|
CWE-74 CWE-77
Injection Command Injection
|
CVE-2026-9402
|
2026-05-25 08:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
454
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability has been found in Edimax BR-6675nD 1.12. Impacted is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. The manipulation of th…
New
|
CWE-119 CWE-120
Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow
|
CVE-2026-9401
|
2026-05-25 08:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
455
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formUSBStorage of the component POST Request Handler. Executing a manipulation of th…
New
|
CWE-74 CWE-77
Injection Command Injection
|
CVE-2026-9400
|
2026-05-25 08:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
456
|
3.5 |
LOW
Network
|
-
|
-
|
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.
New
|
CWE-601
Open Redirect
|
CVE-2026-48832
|
2026-05-25 08:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
457
|
- |
|
-
|
-
|
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsona…
Update
|
CWE-266
Incorrect Privilege Assignment
|
CVE-2026-48172
|
2026-05-25 08:16 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
458
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability was detected in Edimax BR-6675nD 1.12. This vulnerability affects the function formsetPPPoE of the file /goform/formsetPPPoE of the component POST Request Handler. Performing a manipu…
New
|
CWE-119 CWE-120
Incorrect Access of Indexable Resource ('Range Error') Classic Buffer Overflow
|
CVE-2026-9399
|
2026-05-25 07:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
459
|
3.1 |
LOW
Adjacent
|
-
|
-
|
A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass b…
New
|
CWE-287 CWE-294
Improper Authentication Authentication Bypass by Capture-replay
|
CVE-2026-9398
|
2026-05-25 06:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
460
|
8.1 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handler. This manipulati…
New
|
CWE-266 CWE-285
Incorrect Privilege Assignment Improper Authorization
|
CVE-2026-9397
|
2026-05-25 06:16 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|