542 matches found
Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The issue results from improper...
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
Summary A vulnerability exists in the Community Tier of Harden-Runner that allows bypassing the egress-policy: block network restriction using DNS queries over TCP. Harden-Runner enforces egress policies on GitHub runners by filtering outbound connections at the network layer. When egress-policy:...
CVE-2021-22005
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...
Siemens SIPROTEC Inadequate Encryption Strength (CVE-2024-38867)
The affected devices are supporting weak ciphers on several ports 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS. This could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports. This plugin only...
EUVD-2016-4972
Malware in sbrugna...
EUVD-2008-2055
Malware in sbrugna...
EUVD-2020-20793
Malware in sbrugna...
EUVD-2019-5195
Malware in sbrugna...
EUVD-2006-6455
Malware in sbrugna...
EUVD-2013-5370
Malware in sbrugna...
EUVD-2012-3053
Malware in sbrugna...
EUVD-2019-2645
Malware in sbrugna...
EUVD-2013-5371
Malware in sbrugna...
EUVD-2024-48491
Malicious code in bioql PyPI...
EUVD-2022-32620
Malicious code in bioql PyPI...
EUVD-2021-28836
Malicious code in bioql PyPI...
EUVD-2025-27765
Malicious code in bioql PyPI...
EUVD-2022-53118
Malicious code in bioql PyPI...
EUVD-2024-48495
Malicious code in bioql PyPI...
CVE-2022-4980 General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin Page
General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...