229 matches found
CVE-2009-0473-check
Description Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A. Vulnerability Details https://www.cvedetails.com/cve/CVE-2009-0473/ Requirements Python 2.7 You must be running an X Windows environment before executing this script. It will use Python’s...
PT-2026-85371
Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-ENBT affected versions not specified Description A denial-of-service flaw exists in the 1756-ENBT module, which serves as an EtherNet/IP bridge for ControlLogix controllers. An attacker can crash the device by sending ...
CVE-2026-84235
A denial-of-service vulnerability exists in the Rockwell Automation 1756-ENBT CIP Ethernet module. A crafted CIP packet sent to the affected module causes it to crash, rendering the device non-operational until it is restarted. The vulnerability is exploitable over the network with low complexity...
CVE-2026-84235 Rockwell Automation 1756-ENBT Denial of Service Vulnerability
A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing the module. The device requires a restart to recover...
CVE-2026-1756
The WP FOFT Loader plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WPFOFTLoaderMimes::fileandext' function in all versions up to, and including, 2.1.39. This makes it possible for authenticated attackers, with Author-level access and abov...
CVE-2025-14027 Rockwell Automation Recommends Upgrading From 1756-RM2 XT To 1756-RM3 XT
Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various crafted inputs, including malformed Class 3 messages, memory leak conditions, and other resource exhaustion scenarios. Exploitation may cause the device to become unresponsive...
EUVD-2026-1756
Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device...
CVE-2025-8007
A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable MNFR fault. This condition may lead to unexpected system crashes and loss of device availability...
CVE-2025-8007
CVE-2025-8007 concerns Rockwell Automation 1756-EN4TR and 1756-EN2TR (protected mode) where a Concurrent Forward Close operation can trigger a Major Non-Recoverable (MNFR) fault, potentially causing unexpected system crashes and loss of device availability. Connected sources corroborate this vuln...
Rockwell Automation 1756-ENT2R、1756-EN4TR和1756-EN4TRXT 安全漏洞
The Rockwell Automation 1756-ENT2R is an Ethernet communication module from Rockwell Automation, Inc. A security vulnerability exists in the Rockwell Automation 1756-ENT2R, 1756-EN4TR, and 1756-EN4TRXT that originates from a specially crafted message that causes the device to crash...
Rockwell Automation多款产品 安全漏洞
Rockwell Automation 1756-EN4 and others are products of Rockwell Automation, Inc.Rockwell Automation 1756-EN4 is a controller.Rockwell Automation 1756-ENT2R is an Ethernet communication The Rockwell Automation 1756-ENT4R is an Ethernet communication module. A security vulnerability exists in...
CVE-2024-1756
The WooCommerce Customers Manager WordPress plugin before 29.8 does not have authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber, to call it and retrieve the list of customer email addresses along with their id, first name and last name...
CVE-2022-1756
The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $SERVER'REQUESTURI' before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as...
CVE-2010-1756
The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network...
MongoDB Shell < 2.3.0 Control Character Injection (MONGOSH-2028)
The version of MongoDB Shell installed on the remote host is prior to 2.3.0. It is, therefore, affected by a vulnerability as referenced in the MONGOSH-2028 advisory. - mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a...
CVE-2025-1756
creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5713 2025-02-27 17:02:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076927570984469 2025-02-27 17:53:44+00:00| seen|...
CVE-2025-1756
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\nodemodules. This issue affects mongosh prior to 2.3.0...
CVE-2025-1756 MongoDB Shell may be susceptible to local privilege escalation in Windows
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\nodemodules. This issue affects mongosh prior to 2.3.0...
CVE-2025-1756
CVE-2025-1756 reports a local privilege escalation in mongosh when a crafted file is stored under C:\node_modules, affecting mongosh versions prior to 2.3.0. The vulnerability is described consistently across sources (NVD, MONGODB advisories, OSV, Nessus/NASL) as local, with low privileges requir...
RHEL 9 : mysql (RHSA-2025:1756)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1756 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries...