Lucene search
+L

4227 matches found

The Hacker News
The Hacker News
•added 2025/09/19 2:12 p.m.•9 views

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

Fortra has disclosed details of a critical security flaw in GoAnywhere Managed File Transfer MFT software that could result in the execution of arbitrary commands. The vulnerability, tracked as CVE-2025-10035 , carries a CVSS score of 10.0, indicating maximum severity. "A deserialization...

10CVSS9.5AI score0.99799EPSS
SaveExploits3
OSV
OSV
•added 2025/09/15 3:15 p.m.•15 views

DEBIAN-CVE-2022-50271

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

5.5CVSS5.3AI score0.00156EPSS
SaveExploits0References1
Gitee
Gitee
•added 2025/09/14 2:15 p.m.•348 views

smbmap

This is a Python script for a tool called SMBMap, which is designed to enumerate Samba share drives across an entire domain. The tool allows users to list share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute...

7.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/09/14 12:10 a.m.•24 views

CVE-2025-45583

Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password...

9.1CVSS6.9AI score0.00359EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/09/14 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-48038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This...

5.3CVSS5.8AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/12 9:15 p.m.•14 views

CVE-2025-45587

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of Service DoS via a crafted input...

7CVSS0.00265EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/12 9:15 p.m.•14 views

CVE-2025-45583

Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password...

9.1CVSS0.00359EPSS
SaveExploits1References1
Fedora
Fedora
•added 2025/09/12 2:07 a.m.•14 views

[SECURITY] Fedora 42 Update: libssh-0.11.3-1.fc42

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...

4.7CVSS7.2AI score0.00402EPSS
SaveExploits0
CNVD
CNVD
•added 2025/09/12 12:00 a.m.•19 views

WordPress WP Import plugin unauthorized access vulnerability

WordPress WP Import plugin is a plugin for batch importing and exporting WordPress data, supports multiple file formats such as CSV, XML, JSON, etc., and can handle posts, pages, comments, users and other data. WordPress WP Import plugin has an unauthorized access vulnerability that stems from a...

7.7CVSS6.5AI score0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/12 12:00 a.m.•7 views

CVE-2025-45583

Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to authenticate into the service using any combination of username and password...

6.5AI score0.00359EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/12 12:00 a.m.•12 views

Audi UTR 2.0 安全漏洞

Audi UTR 2.0 is an in-vehicle car recording system from Audi Germany. A security vulnerability exists in Audi UTR 2.0, which originates from improper access control of the FTP protocol, which allows an attacker to authenticate using any combination of username and password...

9.1CVSS6.7AI score0.00359EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/09/12 12:00 a.m.•15 views

PT-2025-37347

Name of the Vulnerable Software and Affected Versions: Audi UTR 2.0 Universal Traffic Recorder 2.0 affected versions not specified Description: An incorrect access control issue exists in the FTP protocol. This allows attackers to authenticate to the service using any combination of username and...

9.1CVSS6.2AI score0.00359EPSS
SaveExploits1References6
CVE
CVE
•added 2025/09/12 12:00 a.m.•38 views

CVE-2025-45587

The Audi UTR 2.0 Universal Traffic Recorder 2.0 , an in-vehicle car recording system, contains a stack overflow vulnerability in its FTP service . Attackers can exploit this flaw by providing a crafted input to trigger a Denial of Service (DoS) . While the vulnerability is documented across multi...

6.6AI score0.00265EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/12 12:00 a.m.•20 views

PT-2025-37351

Name of the Vulnerable Software and Affected Versions: Audi UTR 2.0 Universal Traffic Recorder 2.0 Description: A stack overflow in the FTP service allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: At the moment, there is no information about a newer version...

7CVSS6.6AI score0.00265EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/12 12:00 a.m.•37 views

CVE-2025-45583

CVE-2025-45583 affects Audi UTR 2.0 Universal Traffic Recorder 2.0. The vulnerability is an improper access control in the FTP protocol that allows an attacker to authenticate to the service using any username/password combination. CVSS metrics in the provided records indicate a CRITICAL base sco...

9.1CVSS6.5AI score0.00359EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/09/12 12:00 a.m.•11 views

Audi UTR 2.0 安全漏洞

Audi UTR 2.0 is an in-vehicle car recording system from Audi Germany. A security vulnerability exists in Audi UTR 2.0 that originates from a stack overflow in the FTP service, which could lead to a denial of service attack...

7CVSS6.8AI score0.00265EPSS
SaveExploits1References2
OSV
OSV
•added 2025/09/11 9:15 a.m.•12 views

AZL-67278 CVE-2025-48040 affecting package erlang for versions less than 25.3.2.21-4

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to...

6.9CVSS5.7AI score0.00431EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/11 9:15 a.m.•16 views

AZL-67124 CVE-2025-48041 affecting package erlang for versions less than 26.2.5.15-1

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and...

7.1CVSS5.9AI score0.00385EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/11 9:15 a.m.•15 views

AZL-67118 CVE-2025-48038 affecting package erlang for versions less than 25.3.2.21-4

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4...

5.3CVSS5.8AI score0.00385EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/11 9:15 a.m.•24 views

UBUNTU-CVE-2025-48040

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and OTP 26.2.5.15,...

6.9CVSS6AI score0.00431EPSS
SaveExploits0References5
Rows per page
Query Builder