Lucene search
+L

1099 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•3 views

CVE-2025-37138: Improper Neutralization of Special Elements used in a Command

An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an...

6.2CVSS6.3AI score0.0066EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•4 views

CVE-2025-37137: Improper Access Control

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system...

6.5CVSS6.1AI score0.00365EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•2 views

CVE-2025-37136: Improper Access Control

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system...

6.5CVSS6.1AI score0.00365EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•3 views

CVE-2025-37132: Unrestricted Upload of File with Dangerous Type

An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files and execute arbitrary commands on the...

7.2CVSS6.3AI score0.00549EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•4 views

CVE-2025-37135: Improper Access Control

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system...

6.5CVSS6.1AI score0.00365EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•9 views

CVE-2025-37144: Improper Limitation of a Pathname to a Restricted Directory

Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6AI score0.00449EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•22 views

PT-2025-41981

Name of the Vulnerable Software and Affected Versions AOS-8 Controller/Mobility Conductor affected versions not specified Description The command-line interface of the AOS-8 Controller/Mobility Conductor is susceptible to arbitrary file deletion. A remote attacker with valid credentials could...

6.5CVSS6AI score0.00365EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•29 views

PT-2025-41982

Name of the Vulnerable Software and Affected Versions AOS-10 GW and AOS-8 Controllers/Mobility Conductor affected versions not specified Description A command injection flaw exists in the command line interface binary. Exploitation requires physical access to the hardware controllers and...

6.2CVSS6.4AI score0.0066EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•6 views

CVE-2025-37141: Improper Access Control

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•7 views

CVE-2025-37134: Improper Neutralization of Special Elements used in a Command

An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS6.4AI score0.01225EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•4 views

CVE-2025-37143: Improper Access Control

An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6.1AI score0.0038EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•5 views

CVE-2025-37133: Improper Neutralization of Special Elements used in a Command

An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS6.4AI score0.01225EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2002-1256

Malware in sbrugna...

10CVSS6.4AI score0.05282EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-15787

Malware in sbrugna...

6.1CVSS6.3AI score0.00619EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-15782

Malware in sbrugna...

9CVSS7.2AI score0.02588EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2013-5050

Malware in sbrugna...

4.3CVSS6.4AI score0.01403EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-15788

Malware in sbrugna...

6.2CVSS6.5AI score0.00249EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2025-10279

Malicious code in bioql PyPI...

6CVSS6.6AI score0.00247EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-10255

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.01172EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-6700

Malicious code in bioql PyPI...

6CVSS6.6AI score0.00193EPSS
SaveExploits0References2
Rows per page
Query Builder