PT-2025-36979

Name of the Vulnerable Software and Affected Versions: BLMon affected versions not specified Description: An OS Command Injection issue exists in BLMon that could allow command injection when executed in the operating system console during an SSH session. The issue is related to the improper...

IBM Hardware Management Console - Power 跨站脚本漏洞

IBM Hardware Management Console - Power is a hardware appliance from International Business Machines IBM used to configure and control IBM Power Systems servers. A cross-site scripting vulnerability exists in IBM Hardware Management Console - Power versions 10.3.1050.0 and 11.1.1110.0, which...

PT-2025-36735

Name of the Vulnerable Software and Affected Versions: TSW-760 versions prior to 3.001.0031.001 TSW-1060 versions prior to 3.001.0031.001 Description: A vulnerability exists in the ConsoleFindCommandMatchList function within libsymproc.so imported by ctpd that may allow an attacker to execute an...

CVE-2025-9996: Improper Neutralization of Special Elements used in an OS Command

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session...

CVE-2025-9997: Improper Neutralization of Special Elements used in an OS Command

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session...

CVE-2025-36125: Improper Neutralization of Input During Web Page Generation

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

The vulnerability of the Dell OpenManage Enterprise system management console, which stems from the exposure of password values in the log file, allows a hacker to compromise the protected information.

The vulnerability of the Dell OpenManage Enterprise system management console relates to the disclosure of password values in log files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the vsnprintf() function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure

The vulnerability of the vsnprintf function in the console-based image editing tool ImageMagick is related to a violation of the buffer boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-43997

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 8.5.60 through 8.5.100 Apache Tomcat versions 9.0.40 through 9.0.108 Apache Tomcat versions 10.1.0-M1 through 10.1.44 Apache Tomcat versions 11.0.0-M1 through 11.0.10 Description Tomcat did not properly handle ANSI escap...

PT-2025-36459

CVE ID: CVE-2025-0002 Published: 2025-02-10T00:00:00.000Z Severity: CRITICAL 9.1/10 Description Remote code execution vulnerability in Cloud Management Console v3.1.0 and earlier allows authenticated administrators to execute arbitrary commands on the underlying host. Root Cause Improper input...

The vulnerability of the console-based graphic editor ImageMagick lies in its dependence on behaviors that are uncertain for each implementation type. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to its dependence on behaviors that are uncertain for each implementation type. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the ReadOneMNGIMage function in the console-based ImageMagick graphics editor, related to buffer overflow in dynamic memory, allows an attacker to exploit the memory contents of the processes.

The vulnerability of the ReadOneMNGIMage function in the console-based ImageMagick graphics editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose the contents of process memory...

The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow or data corruption, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to integer overflow or data corruption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Fixed in Apache Tomcat 10.1.45

Low: Console manipulation via escape sequences in log messages CVE-2025-55754 Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

metasploit-framework

This is an offensive tool for penetration testing. It is the Metasploit Framework, a comprehensive platform for developing and executing exploits. The framework is written in Ruby and provides a wide range of features for penetration testing, including exploit development, vulnerability scanning,...

Linux Distros Unpatched Vulnerability : CVE-2025-38685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: Fix vmalloc out-of-bounds write in fastimageblit This issue triggers when a userspace program does an ioctl FBIOPUTCON2FBMAP by passing console number an...

MAL-2025-43892 Malicious code in copilotstudio-console (npm)

The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in copilotstudio-console (npm)

The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-58818: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in SwiftNinjaPro Developer Tools Blocker swiftninjapro-inspect-element-console-blocker allows Cross Site Request Forgery.This issue affects Developer Tools Blocker: from n/a through = 3.2.1...

The vulnerability of the fbcon_info_from_console function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fbconinfofromconsole function in the Linux operating system’s kernel is related to incorrect calculation of the index. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...