Lucene search
+L

87 matches found

Circl
Circl
added 2026/04/04 4:33 p.m.8 views

CVE-2026-5550

creationtimestamp| type| source ---|---|--- 2026-04-04 16:33:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116347396717928485 2026-04-05 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116351279339813810 2026-04-05 09:00:31+00:00| seen|...

9CVSS8.1AI score0.00516EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/04 12:0 a.m.8 views

PT-2026-30382

A vulnerability was identified in Tenda AC10 16.03.10.10 multi TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected...

9CVSS7.7AI score0.00516EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/03/09 12:0 a.m.6 views

Advantech ADAM-5550 Weak Encoding For Password (CVE-2024-37187)

Advantech ADAM 5550's web application includes a 'logs' page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output This plugin only works with Tenable.ot. Please visit...

6.8CVSS5.8AI score0.0036EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/09 12:0 a.m.5 views

Advantech ADAM-5550 Weak Encoding For Password (CVE-2024-37187)

Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

6.8CVSS5.8AI score0.0036EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-37259

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00295EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-36489

Malicious code in bioql PyPI...

6.8CVSS5.9AI score0.0036EPSS
SaveExploits0References1
Circl
Circl
added 2025/06/04 1:23 a.m.26 views

CVE-2025-5550

creationtimestamp| type| source ---|---|--- 2025-06-04 01:23:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqnavkhowf2 2025-06-04 01:31:30+00:00| published-proof-of-concept| Telegram/zUVTgXvzkwLEqz2FR1DEMSQdpoQl8zaI1Yp9yK0vMGoKWE...

9.8CVSS7.3AI score0.00565EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/06/04 1:0 a.m.5 views

CVE-2025-5550 FreeFloat FTP Server PBSZ Command buffer overflow

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component PBSZ Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

7.5CVSS7.4AI score0.00565EPSS
SaveExploits1References4
CVE
CVE
added 2025/06/04 1:0 a.m.57 views

CVE-2025-5550

Affected software: FreeFloat FTP Server 1.0. The issue is a buffer overflow in the PBSZ Command Handler that can be exploited remotely. Multiple sources confirm a critical impact with remote attack feasibility and publicly disclosed exploits. Remediation is present in at least one connected docum...

9.8CVSS7.4AI score0.00565EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 7:42 a.m.10 views

CVE-2024-37187

Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding...

6.8CVSS6.9AI score0.0036EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:43 p.m.10 views

CVE-2020-5550

Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows remote attackers to impersonate a registered user and log in the management console, that may result in information alteration/disclosure via unspecified vectors...

8.1CVSS6.8AI score0.0186EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/22 12:0 a.m.10 views

The vulnerability of the microprogrammed logic controller Advantech ADAM 5550, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the microprogrammed logic controller Advantech ADAM 5550 lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

8.8CVSS5.2AI score0.00295EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:0 a.m.8 views

The vulnerability of the microprogrammed logic controller Advantech ADAM-5550, related to the use of weak encryption algorithms, allows a hacker to expose user account information.

The vulnerability of the microprogrammed logic controller Advantech ADAM-5550 lies in the use of weak encryption algorithms. Exploiting this vulnerability could allow an intruder to access user credentials...

6.1CVSS5.4AI score0.0036EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 8:52 a.m.15 views

CVE-2024-38308

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...

8.8CVSS7AI score0.00295EPSS
SaveExploits0
CNVD
CNVD
added 2024/09/30 12:0 a.m.9 views

Advantech ADAM-5550 Information Disclosure Vulnerability

Advantech ADAM-5550 is a programmable automation controller from Advantech, China. The Advantech ADAM-5550 suffers from an information disclosure vulnerability due to a flaw in base64 encoding for sharing user credentials. An attacker can exploit this vulnerability to obtain credential informatio...

6.8CVSS6.2AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/27 6:15 p.m.31 views

CVE-2024-38308

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...

8.8CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/27 6:15 p.m.30 views

CVE-2024-37187

Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding...

6.8CVSS0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/27 5:28 p.m.22 views

CVE-2024-38308 Advantech ADAM-5550 Cross-site Scripting

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...

8.8CVSS7.1AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/27 5:28 p.m.61 views

CVE-2024-38308

CVE-2024-38308 affects Advantech ADAM-5550. The vulnerability is a Cross-Site Scripting issue on the device’s web application “logs” page where HTTP requests are displayed without proper neutralization of malicious code, enabling potential web content injection. Connected sources confirm affected...

8.8CVSS7.5AI score0.00295EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/27 5:28 p.m.39 views

CVE-2024-38308 Advantech ADAM-5550 Cross-site Scripting

Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doesn't correctly neutralize malicious code when parsing HTTP requests to generate page output...

8.8CVSS0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder