33883 matches found
CVE-2025-10962
A vulnerability was identified in Wavlink NU516U1 M16U1V240425. This impacts the function sub403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac5g leads to command injection. It is possible to initiate the attack remotely. The exploit is...
CVE-2025-20316
A vulnerability in the access control list ACL programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an...
Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities
Summary IBM Guardium Data Security Center has addressed these vulnerabilties with an update. Vulnerability Details CVEID:CVE-2021-43784 DESCRIPTION: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a...
CVE-2025-59831
creationtimestamp| type| source ---|---|--- 2025-09-25 15:13:46+00:00| seen| https://gist.github.com/Darkcrai86/c3f7244513af4442fb9d34ce20b3bfb8...
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory
Microsoft Threat Intelligence has identified yet another XCSSET variant in the wild that introduces further updates and new modules beyond those detailed in our March 2025 blog post. The XCSSET malware is designed to infect Xcode projects, typically used by software developers, and run while an...
CVE-2025-10948
A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...
CVE-2025-42907
SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...
Wavlink NU516U1 命令注入漏洞
Wavlink NU516U1 is a wireless print server from China Ruiyin Wavlink. A command injection vulnerability exists in the Wavlink NU516U1 M16U1V240425 version, which stems from a misuse of the parameter macAddr in the file /cgi-bin/wireless.cgi, which could lead to a command injection attack...
MikroTik RouterOS 7 安全漏洞
MikroTik RouterOS 7 is an operating system from the Latvian company MikroTik. A security vulnerability exists in MikroTik RouterOS 7 that originates from a buffer overflow in the parsejsonelement function of the component libjson.so in the file /rest/ip/address/print, which could lead to remote...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SideroLink connection. An attacker can send arbitrary packets over the interface by exploiting the lack of validation on the packet's destination address. Workaround Users who are not able to upgrade to t...
GHSA-Q7PG-QCHV-3PC5
creationtimestamp| type| source ---|---|--- 2025-09-24 20:42:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115261215131493060...
GO-2025-3969 DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly
DragonFly's manager generates mTLS certificates for arbitrary IP addresses in d7y.io/dragonfly...
CVE-2025-55322
Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network...
CVE-2025-55322
The CVE-2025-55322 entry concerns Microsoft OmniParser: an issue where binding to an unrestricted IP address enables an unauthenticated attacker to execute arbitrary code over the network. The vulnerability is documented with CVSSv3.1 base score 7.3 (HIGH) and involves network attack vector, no u...
DRUPAL-CONTRIB-2025-111
This module allows you to specify an HTTP header name to determine the client's IP address. The module doesn't sufficiently handle all cases under the scenario if Drupal Core settings $settings'reverseproxy' is set to TRUE and $settings'reverseproxyaddresses' is configured. This vulnerability...
CVE-2025-20316
A vulnerability in the access control list ACL programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an...
CVE-2025-20316
CVE-2025-20316 describes a vulnerability in the ACL programming of Cisco IOS XE Software on Cisco Catalyst 9500X and 9600X Series Switches. The issue allows an unauthenticated, remote attacker to bypass a configured egress ACL. The root cause is tied to traffic flooding from an unlearned MAC addr...
CVE-2025-10787
A vulnerability was found in MuYuCMS up to 2.7. Impacted is an unknown function of the file /index/index.html of the component Add Fiend Link Handler. Performing manipulation of the argument Link URL results in server-side request forgery. The attack may be initiated remotely. The exploit has bee...
