← All credits
@Nebusec
25 vulnerability records and advisories credit this contributor.
CVE-2026-76866
Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters
CVE-2026-76865
Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
CVE-2026-76864
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names
CVE-2026-76863
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes
CVE-2026-76862
Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
CVE-2026-76861
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi
CVE-2026-76860
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
CVE-2026-76859
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi
CVE-2026-76858
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi
CVE-2026-76857
Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi