275 matches found
EUVD-2020-17743
Malware in sbrugna...
EUVD-2021-27406
Malware in sbrugna...
Nozomi Networks Guardian/CMC SQL注入漏洞
Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. A SQL injection vulnerability exists in Nozomi Networks Guardian/CMC that stems from improper validation of input parameters in the Alert function, which could lead to an SQL injectio...
Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0
Summary A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. Impact An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthoriz...
Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
Summary A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. Impact An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing...
Client-side path traversal in Guardian/CMC before 25.2.0
Summary A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. Impact An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a...
Nozomi Networks CMC和Nozomi Networks Guardian SQL注入漏洞
Nozomi Networks CMC and Nozomi Networks Guardian are both products of Nozomi Networks, U.S.A. Nozomi Networks CMC is a software application. Provides centralized OT and IoT security management.Nozomi Networks Guardian is a guardian software. Nozomi Networks CMC and Nozomi Networks Guardian suffer...
Nozomi Networks Guardian和Nozomi Networks CMC 路径遍历漏洞
Nozomi Networks Guardian and Nozomi Networks CMC are both products of Nozomi Networks, U.S.A. Nozomi Networks Guardian is an IoT device and software inspection system.Nozomi Networks CMC is a software application. It provides centralized OT and IoT security management. Nozomi Networks Guardian an...
EUVD-2025-3384
Malicious code in bioql PyPI...
EUVD-2022-15673
Malicious code in bioql PyPI...
EUVD-2022-43907
Malicious code in bioql PyPI...
EUVD-2023-34045
Malicious code in bioql PyPI...
EUVD-2022-15672
Malicious code in bioql PyPI...
Nozomi Networks CMC 安全漏洞
Nozomi Networks CMC is a network management platform from Nozomi Networks, Inc. A security vulnerability exists in Nozomi Networks CMC versions prior to 25.1.0 that stems from improper access control and could lead to unauthorized network data disclosure...
PT-2025-34753 · Cmc · Cmc
Name of the Vulnerable Software and Affected Versions: CMC versions prior to 25.1.0 Description: An access control issue was identified in the Request Trace and Download Trace functionalities. Improper access restrictions allow authenticated users with limited privileges to request and download...
Malicious code in cmc-inferno (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db96f961787fc8fc35c246e14979af463d5ced86a881c2126d03b95423ff0cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5902 Malicious code in cmc-inferno (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db96f961787fc8fc35c246e14979af463d5ced86a881c2126d03b95423ff0cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-42965
SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitati...
CVE-2025-42965
SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitati...
CVE-2025-42965
CVE-2025-42965 affects SAP CMC Promotion Management and is an SSRF issue where an authenticated attacker can enumerate internal network endpoints by sending crafted requests during job source configuration and analyzing response times. This can lead to information disclosure (confidentiality impa...