PT-2025-17299 · Orban · Orban Optimod 5950

Name of the Vulnerable Software and Affected Versions: Orban OPTIMOD 5950 Firmware version 1.0.0.2 Orban OPTIMOD 5950 System version 2.2.15 Description: The issue is related to incorrect access control, allowing attackers to bypass authentication and gain Administrator privileges. Recommendations...

Orban OPTIMOD 5950 Firmware和Orban OPTIMOD 5950 System 安全漏洞

The Orban OPTIMOD 5950 Firmware and the Orban OPTIMOD 5950 System are both products of Orban Corporation.The Orban OPTIMOD 5950 Firmware is an audio processor firmware.The Orban OPTIMOD 5950 System is an audio processor system. A security vulnerability exists in the Orban OPTIMOD 5950 Firmware an...

Linux Distros Unpatched Vulnerability : CVE-2018-5950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options...

CVE-2024-5950

Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to...

CVE-2023-5950 Rapid7 Velociraptor Reflected XSS

This advisory covers a specific issue identified in Velociraptor and disclosed by a security code review. We want to thank Mathias Kujala for working with the Velociraptor team to identify and rectify this issue. It has been fixed as of Version 0.7.0-4, released November 6, 2023. CVSS · HIGH ·...

CVE-2023-5950

CVE-2023-5950 – Rapid7 Velociraptor : Reported as a reflected cross-site scripting vulnerability in Velociraptor versions prior to 0.7.0-4, enabling attackers to inject JS via the error path. A fix is available in version 0.7.0-04, with patches also provided for 0.6.9 (0.6.9-1). Several connected...

SUSE: Security Advisory (SUSE-SU-2019:13924-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5950

creationtimestamp| type| source ---|---|--- 2020-12-11 22:38:59+00:00| seen| https://t.me/cibsecurity/20483 2020-12-11 22:54:32+00:00| seen| https://t.me/cibsecurity/20502 2020-12-11 23:25:27+00:00| seen| https://t.me/cibsecurity/20522 2020-12-12 00:25:27+00:00| seen| https://t.me/cibsecurity/205...

CVE-2020-5950

CVE-2020-5950 affects F5 BIG-IP 14.1.0–14.1.2.6, with undisclosed iControl REST endpoints enabling reflected XSS that could lead to complete BIG-IP compromise if the victim is admin. Public sources (NVD/Red Hat/CVE listings) reiterate the affected range and vulnerability description. The F5 advis...

Mailman 2.1.23 Cross Site Scripting

Title: Mailman 1.x 2.1.23 - Cross Site Scripting XSS Type: Reflected XSS Software: Mailman Version: =1.x = 2.1.23 Vendor Homepage: https://www.list.org Original link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5950 POC Author: Valerio Alessandroni Date: 28/10/2020 Description:...

Rockwell Automation Allen-Bradley Stratix 5950

1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley Stratix 5950 Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write a...

CVE-2018-5950

A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions...

Rockwell Automation Stratix 5950 Industrial EtherNet/IP Security Appliance < 15.3 Improper Input and Certificate Validation

Binary data 720282.prm...

Rockwell Automation 1783-SAD4T0SBK9 Stratix 5950 Industrial EtherNet/IP Security Appliance

Binary data 764939.prm...

Rockwell Automation Stratix 5950 Industrial EtherNet/IP Security Appliance < 15.3 Improper Input Validation

Binary data 720281.prm...

Rockwell Automation 1783-SAD2T2SPK9 Stratix 5950 Industrial EtherNet/IP Security Appliance

Binary data 764942.prm...

Rockwell Automation 1783-SAD4T0SPK9 Stratix 5950 Industrial EtherNet/IP Security Appliance

Binary data 764940.prm...

NewStart CGSL MAIN 4.05 : mailman Vulnerability (NS-SA-2019-0122)

The remote NewStart CGSL host, running version MAIN 4.05, has mailman packages installed that are affected by a vulnerability: - A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's...

NewStart CGSL MAIN 5.04 : mailman Vulnerability (NS-SA-2019-0008)

The remote NewStart CGSL host, running version MAIN 5.04, has mailman packages installed that are affected by a vulnerability: - A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's...

Rockwell Automation Stratix 5950

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Stratix 5950 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to cause an...