188 matches found
MeteoBridge <= 6.1 - Remote Code Execution
The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote...
CVE-2026-4008
creationtimestamp| type| source ---|---|--- 2026-03-12 09:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116215384488854479 2026-03-12 09:05:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgu2acb62a2n 2026-03-12 09:42:43+00:00| seen|...
MiracleLinux 8 : xorg-x11-server-1.20.11-5.el8, xorg-x11-server-Xwayland-21.1.3-2.el8 (AXSA:2022-3547:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3547:01 advisory. xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access CVE-2021-4008 xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access...
Smartbedded Meteobridge < 6.2 RCE (CVE-2025-4008)
The version of Smartbedded Meteobridge installed on the remote host is 6.1 or prior. It is, therefore, affected by a command injection vulnerability as referenced in the CVE-2025-4008 advisory. In the template.cgi script, unsanitized user input from the query string is passed directly to an eval...
EUVD-2018-10472
Malware in sbrugna...
EUVD-2025-4008
Malicious code in bioql PyPI...
MeteoBridge template.cgi command injection
Added: 10/03/2025 CVE: CVE-2025-4008 Background MeteoBridge is a device which connects personal weather stations to public weather networks. Problem A command injection vulnerability in the MeteoBridge web interface could allow remote, unauthenticated attackers to execute arbitrary commands by...
CVE-2024-4008
creationtimestamp| type| source ---|---|--- 2025-09-17 05:46:08+00:00| seen| Telegram/JmNFxwTj8TYEEA4rNrVZJEsccj89CAa2yxQGnB98r2cKcr4...
TencentOS Server 3: xorg-x11-server-Xwayland (TSSA-2022:0228)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0228 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2022-4008
In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service...
CVE-2013-3646
The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression...
CVE-2025-4008
creationtimestamp| type| source ---|---|--- 2025-05-21 15:42:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17135 2025-05-21 15:57:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114546643422662237 2025-05-21 17:18:31+00:00| seen|...
CVE-2025-4008 Arbitrary Command Injection in Smartbedded MeteoBridge
The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...
CVE-2025-4008 Arbitrary Command Injection in Smartbedded MeteoBridge
The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...
CVE-2025-4008
The CVE-2025-4008 vulnerability affects Smartbedded Meteobridge prior to 6.2. The web interface processes input in template.cgi (unsanitized query-string data passed to eval), enabling unauthenticated remote attackers to execute arbitrary commands with root privileges, risking full device comprom...
Linux Distros Unpatched Vulnerability : CVE-2016-4008
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The asn1extractderoctet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1DECODEFLAGSTRICTDER flag, allows remote attackers to...
[SECURITY] [DLA 4008-1] linux-6.1 security update
Debian LTS Advisory DLA-4008-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 02, 2025 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.119-1deb11u1 CVE ID : CVE-2022-45888 CVE-2023-31083 CVE-2023-45896 CVE-2023-52760 CVE-2023-52812...
CVE-2024-4008
FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...
CVE-2024-4008
CVE-2024-4008 concerns an FDSK Leak in ABB KNX Secure devices. Connected documents confirm affected components: ABB Display (version 1.00) and BCU (version 1.3.0.33), with the underlying issue allowing an attacker to gain control via access to the local KNX bus-system. Practical impact is control...