SUSE CVE-2025-2570

Mattermost versions 10.5.x = 10.5.3, 9.11.x = 9.11.11 fail to check RestrictSystemAdmin setting if user doesn't have access to ExperimentalSettings which allows a System Manager to access ExperimentSettings when RestrictSystemAdmin is true via System Console...

IBM DS8900F Hardware Management Console和IBM DS8A00 Hardware Management Console 跨站脚本漏洞

The IBM DS8900F Hardware Management Console IBM DS8900F HMC and the IBM DS8A00 Hardware Management Console IBM DS8A00 HMC are both products of International Business Machines IBM.The IBM DS8900F Hardware Management Console is an enterprise-class disk storage system for storing and managing...

CVE-2024-45094: Improper Neutralization of Input During Web Page Generation

IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2025-5196

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

CVE-2025-5196

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

CVE-2025-5196

CVE-2025-5196 affects Wing FTP Server up to 7.4.3, via the Lua Admin Console, granting execution with unnecessary privileges. Exploitation appears remote and authenticated (PoC exists). Upgrade to version 7.4.4 to address the issue; vendor notes recommend running the service as a Normal User for ...

CVE-2025-5196 Wing FTP Server Lua Admin Console unnecessary privileges

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

CVE-2025-5196 Wing FTP Server Lua Admin Console unnecessary privileges

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

CVE-2025-5196: Execution with Unnecessary Privileges

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

PT-2025-22929 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions 7.4.0 through 7.4.3 Description: A critical vulnerability has been found in the Lua Admin Console component of Wing FTP Server, allowing execution with unnecessary privileges. The attack can be launched remotely and h...

Exploit for Execution with Unnecessary Privileges in Wftpserver Wing_Ftp_Server

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated...

CVE-2025-0617

An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger file parsing containing exponential entity expansions in the consumer process thus causing a Denial of Service...

CVE-2024-34543

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36247

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-34153

Uncontrolled search path element in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36261

Improper access control in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-32940

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-33848

Uncaught exception in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-5620

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass. This issue affects Apinizer Management Console: before 2024.05.1...