Vzlet SP Authorization Bypass

The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...

Dell PowerProtect Data Manager security vulnerabilities

Dell PowerProtect Data Manager PPDM is a data protection solution developed by the American company Dell. This product supports functions such as data backup, virtual machine backup, and database protection. Versions of Dell PowerProtect Data Manager prior to 19.22 contained security...

Dell PowerProtect Data Manager (PPDM) security vulnerabilities

Dell PowerProtect Data Manager PPDM is a data protection solution provided by the American company Dell. This product supports functions such as data backup, virtual machine backup, and database protection. Versions of Dell PowerProtect Data Manager prior to 19.22 contained security...

CVE-2025-69725

CVE-2025-69725 affects go-chi/chi versions >= 5.2.2, specifically the RedirectSlashes function, which enables an Open Redirect vulnerability. The issue allows remote attackers to redirect users to malicious sites using the legitimate domain. The provided metrics indicate a CVSS v3.1 base score...

PT-2026-23553

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.13 clawdbot versions prior to 2026.1.24-3 Description The software contains a denial of service issue in webhook handlers due to insufficient limits on request body size and processing time. Remote,...

CVE-2019-25352: Improper Limitation of a Pathname to a Restricted Directory

Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows...

UTT HiPER 810 security vulnerability

UTT HiPER 810 is an intelligent broadband router produced by UTT Corporation. UTT HiPER 810 has a security vulnerability. This vulnerability stems from the use of insecure default credentials in the telnet service, which may allow remote attackers to obtain root access through a specially crafted...

Projectworlds Online Time Table Generator has a security vulnerability

Projectworlds Online Time Table Generator is an online schedule generator developed by the Indian company Projectworlds. Version 1.0 of Projectworlds Online Time Table Generator has a security vulnerability. This vulnerability stems from the lack of authentication in files admin/student.php and...

AMR Printer Management path traversal vulnerability

AMR Printer Management is a hosting printing service software provided by AMR Printer Management Company in Spain. The AMR Printer Management 1.01 Beta version contains a path traversal vulnerability. This vulnerability stems from path traversal vulnerabilities in the web service, allowing remote...

PT-2026-20527

Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows...

CVE-2025-70147

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

CVE-2025-33089

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information or perform unauthorized actions due to the use of hard coded user credentials...

CVE-2025-14289

IBM webMethods Integration Server 12.0 is vulnerable to HTML injection in the Security > Claims UI (CVE-2025-14289). A remote attacker could inject malicious HTML that executes in the victim’s browser within the hosting site’s security context. Root cause: improper neutralization of script-rel...

CVE-2026-26357

Dell Unisphere for PowerMax, versions 9.2.4.x, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or...

CVE-2025-36598

Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to upload malicious...

CVE-2025-36598

Dell Avamar, versions prior to 19.12 with patch 338905, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to upload malicious...

Dell Avamar path traversal vulnerability

Dell Avamar is a specially designed backup application developed by the American company Dell. It provides a convenient, packaged, affordable, and data-duplication-removal-based backup solution. Prior to version 19.12 of Dell Avamar, there was a path traversal vulnerability. This vulnerability...

HPE Aruba Networking 5G Core server API security vulnerabilities

The HPE Aruba Networking 5G Core Server API is a programming and management interface provided by the American company HPE. There are security vulnerabilities associated with the HPE Aruba Networking 5G Core Server API. These vulnerabilities stem from improper handling of API errors, which may...

HPE Aruba Networking 5G Core server API security vulnerabilities

The HPE Aruba Networking 5G Core Server API is a programming and management interface provided by the American company HPE. There are security vulnerabilities associated with the HPE Aruba Networking 5G Core Server API. These vulnerabilities stem from improper handling of API errors, which may...

Dell Avamar path traversal vulnerability

Dell Avamar is a specially designed backup application developed by the American company Dell. It provides a convenient, packaged, affordable, and data-duplication-removal-based backup solution. Prior to version 19.12 of Dell Avamar, there was a path traversal vulnerability. This vulnerability...