PT-2025-22514

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 18.26.2 Asterisk versions prior to 20.14.1 Asterisk versions prior to 21.9.1 Asterisk versions prior to 22.4.1 certified-asterisk versions prior to 18.9-cert14 certified-asterisk versions prior to 20.7-cert5...

Cisco Application Policy Infrastructure Controller Privilege Escalation Command Injection

The vulnerability of the Command Line Interface CLI of the Cisco Application Policy Infrastructure Controller management tool is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...

Cisco Application Policy Infrastructure Controller CLI Disclosure

The vulnerability of the Command Line Interface CLI of the Cisco Application Policy Infrastructure Controller management tool is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2025-43853 iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature

The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. Anyone running WAMR up to and including version 2.2.0 or WAMR built with libc-uvwasi on Windows is affected by a symlink...

Alibaba Cloud Linux 3 : 0066: flatpak (ALINUX3-SA-2024:0066)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0066 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-28100: Flatpak is a system for...

GUI Issue - Unbinding the LogAction from Rewrite policy fails from GUI but works from Cli

Re-Write Policy is configured with a Log Action bound to it. When the Log Action is removed from the policy via the GUI, the policy is not actually removed. After hitting 'OK', there's no error, and the Log Action is still bound when checked again...

CVE-2025-20213

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials...

CVE-2025-20200

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

CVE-2025-20195

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management...

Applied Post Quantum Cryptography: a Practical Approach for Generating Certificates in Industrial Environments

The transition to post-quantum cryptography PQC presents significant challenges for certificate-based identity management in industrial environments, where secure onboarding of devices relies on long-lived and interoperable credentials. This work analyzes the integration of PQC into X.509...

Exploit for SQL Injection in Valvepress Automatic

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 !...

HPE Aruba Networking Access Point CLI Code Execution

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to the UDP port...

PoCVulDb

It is an offensive tool for various vulnerabilities. The reposit...

PAN-OS CLI Unauthorized Access

The command-line interface CLI of the PAN-OS operating system has vulnerabilities due to the lack of measures to neutralize specific elements. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information...

Cisco IOS XR Privilege Escalation Command Injection

The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and execute arbitrary commands...

CVE-2025-27079

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...

CVE-2025-27079 Arbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI Interface

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...

NetScaler Agent 13.1/14.1: How to Change the nsroot Password for NetScaler Agent via CLI

Requirement to change nsroot password for NetScaler Agent...

CVE-2025-27079: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...

FortiClient Command Line Interface Unauthorized Access

The vulnerability of the Command Line Interface CLI of the Fortinet FortiClient security device is related to the storage of critical information in an open manner. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the protected information...