Skip to content
Noroxi

@Nebusec

25 credited records · 25 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for @Nebusec

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-92257
    20Monitor

    Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks

    MediumCVSS 5.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-92256
    28Monitor

    Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-92255
    21Monitor

    Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse

    MediumCVSS 5.3No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76873
    20Monitor

    Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields

    MediumCVSS 5.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76872
    20Monitor

    Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages

    MediumCVSS 5.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76871
    28Monitor

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76870
    28Monitor

    Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76869
    34Monitor

    Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi

    HighCVSS 8.6No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76868
    27Monitor

    Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port

    MediumCVSS 6.9No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76867
    20Monitor

    Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers

    MediumCVSS 5.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76866
    34Monitor

    Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters

    HighCVSS 8.6No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76865
    27Monitor

    Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers

    MediumCVSS 6.9No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76864
    19Monitor

    Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names

    MediumCVSS 4.8No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76863
    21Monitor

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes

    MediumCVSS 5.3No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76862
    34Monitor

    Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths

    HighCVSS 8.7No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76861
    34Monitor

    Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi

    HighCVSS 8.7No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76860
    34Monitor

    Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization

    HighCVSS 8.7No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76859
    28Monitor

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76858
    19Monitor

    Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi

    MediumCVSS 4.8No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76857
    28Monitor

    Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76856
    28Monitor

    Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints

    HighCVSS 7.0No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76855
    28Monitor

    Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76854
    28Monitor

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi

    HighCVSS 7.1No exploitEPSS 0%

    netcore · nr255-vSep 15, 2026

  • CVE-2026-76853
    28Monitor

    Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

    HighCVSS 7.2No exploitEPSS 0%

    netcore · nr268Sep 15, 2026

  • CVE-2026-76852
    34Monitor

    Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write

    HighCVSS 8.7No exploitEPSS 0%

    netcore · nr268Sep 15, 2026