#cwe-912

共收录 19 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布CRITICAL

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipu...

CVE-2026-118579

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically...

CVE-2026-114353

Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator pr...

CVE-2026-97627

Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A use

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator pr...

CVE-2026-100737

Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A use

历史摘要 · 未重新核验 · NVD

安全公告2026-10-20 发布INFO

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects...

CVE-2026-112360

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-19 发布INFO

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. T...

CVE-2026-112360

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden ac...

CVE-2026-82829

Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS...

CVE-2026-80217

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and acce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - aut...

CVE-2026-15413

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its...

CVE-2026-18844

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface. These commands are sent without authentic...

CVE-2026-18844

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage p...

CVE-2026-17032

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code exe...

CVE-2026-14812

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current release (10.2.2) and the version MonsterInsig...

CVE-2026-11976

The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the adminis...

CVE-2026-18191

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented...

CVE-2026-4769

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startu

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote,...

CVE-2026-7413

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authen

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality. The backdoor...

CVE-2026-7413

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag fo...

CVE-2026-41446

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints th

历史摘要 · 未重新核验 · NVD