CVE-2022-43851: Use of a Broken or Risky Cryptographic Algorithm

IBM Aspera Console 3.4.0 through 3.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2022-43850: Improper Neutralization of Input During Web Page Generation

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2022-43847: Improper Neutralization of HTTP Headers for Scripting Syntax

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...

CVE-2022-43840: Improper Neutralization of Data within XPath Expressions

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document...

CVE-2022-43852: Exposure of Sensitive System Information to an Unauthorized Control Sphere

IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system...

IBM Aspera Console 加密问题漏洞

IBM Aspera Console is a Web-based application from International Business Machines IBM. Allows users to centrally manage, monitor and control Aspera servers nodes and transports. An encryption issue vulnerability exists in IBM Aspera Console 3.4.4 and prior versions, which stems from the use of a...

PT-2025-16263 · Ibm · Ibm Aspera Console

Name of the Vulnerable Software and Affected Versions: IBM Aspera Console versions 3.4.0 through 3.4.4 Description: The issue is caused by improper validation of input by the HOST headers, leading to HTTP header injection. This could allow an attacker to conduct various attacks against the...

vt_ioctl() Function Heap Buffer Overflow DoS

Vulnerability of the vtioctl function in the drivers/tty/vt/vtioctl.c module – The driver for supporting TTY consoles in Linux operating systems is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-31932

Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment...

SQL Injection

com.vip.saturn, saturn-console is vulnerable to SQL injection. The vulnerability is due to SQL injection due to insufficient input validation in the /console/dashboard/executorCount?zkClusterKey component, allowing remote attackers to execute arbitrary code...

PT-2025-16101

Name of the Vulnerable Software and Affected Versions: BizRobo! affected versions not specified Description: A deserialization of untrusted data issue exists in BizRobo!. If this issue is exploited, an arbitrary code is executed on the Management Console. The vendor provides workaround informatio...

CVE-2025-31932: Deserialization of Untrusted Data

Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment...

Multiple vulnerabilities in BizRobo!

Overview BizRobo! is an RPA Robotic Process Automation software provided by OPEN, Inc. Users compile an automation flow using DesignStudio, a development application that runs on Windows, and create robot files. A web application Management Console is provided to schedule RPA execution and to che...

Director is not showing correct number of active sessions

Director is not showing correct number of active sessions. Number of active session in Studio console does not match with Director - Filters -Sessions option...

Ivanti Cloud Services Application Code Execution

The vulnerability of the web console of the network device Ivanti Cloud Services Application exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Exploit for Improper Neutralization in Microsoft

CVE-2025-26633 - MSC EvilTwin PoC Proof of Concept PoC...

Security update for xen

This update for xen fixes the following issues: CVE-2025-1713: Fixed potential deadlock with VT-d and legacy PCI device pass-through bsc1238043 Other fixes: Xen channels and domU console bsc1219354 Fixed attempting to start guest vm's libxl fills disk with errors bsc1237692 Xen call trace and API...

PT-2025-15073

Name of the Vulnerable Software and Affected Versions Zammad versions 6.4.0 through 6.4.1 Description The issue concerns information exposure where logged-in customers can see details about shared article drafts for their customer tickets in the browser console, potentially containing confidentia...

CVE-2025-2243

Bitdefender GravityZone Console (GravityZone Console) is affected by CVE-2025-2243, an SSRF vulnerability where an attacker may bypass input validation by using leading characters in DNS requests. The issue affects GravityZone Console versions before 6.41.2.1. Root cause: flawed input validation ...

CVE-2025-2243 SSRF in GravityZone Console via DNS Truncation (VA-12634)

A server-side request forgery SSRF vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue...