Lucene search
+L

15697 matches found

Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•24 views

PT-2025-44166

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 Core Update 198 Description IPFire versions prior to 2.29 Core Update 198 are susceptible to a stored cross-site scripting XSS issue. An authenticated attacker can inject arbitrary JavaScript code through the...

5.4CVSS5.8AI score0.00485EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/28 12:00 a.m.•8 views

CVE-2025-34307: Improper Neutralization of Input During Web Page Generation

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the firewall country search defaults. When a user updates the default value...

5.4CVSS6.1AI score0.00485EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/27 3:32 p.m.•133 views

Exploit for Deserialization of Untrusted Data in Microsoft

WSUSResponder v1.0.1 Module PowerShell de réponse à l'inc...

9.8CVSS8.3AI score0.9998EPSS
SaveExploits24
RedhatCVE
RedhatCVE
•added 2025/10/25 12:42 a.m.•27 views

CVE-2025-60568

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall...

7.5CVSS7.8AI score0.00373EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2025/10/24 11:06 a.m.•6 views

Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

This update for kernel-livepatch-MICRO-6-0-RTUpdate3 fixes the following issues: CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations bsc1232384 CVE-2025-21971: netsched: Prevent creation of classes with TCHROOT bsc1245794 CVE-2025-38206: exfat: fix double free in delayedfre...

9.2CVSS6.7AI score0.00587EPSS
SaveExploits1References40
RedhatCVE
RedhatCVE
•added 2025/10/23 5:34 p.m.•17 views

CVE-2025-62820

A flaw was found in Slack Nebula. An improper CIDR construction in the hostmap logic makes the inbound firewall overly permissive for nodes with certificates allowing subnets or multiple IPs. An attacker controlling such a node can send packets with arbitrary source IP addresses within the networ...

4.9CVSS7.9AI score0.0022EPSS
SaveExploits0References2
ICS
ICS
•added 2025/10/23 6:00 a.m.•24 views

AutomationDirect Productivity Suite

RISK EVALUATION Successful exploitation of these vulnerabilities could enable an attacker to execute arbitrary code, disclose information, gain full-control access to projects, or obtain read and write access to files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

7.9AI score
SaveExploits0References13
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•26 views

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions that stems from a diagnostic command injection flaw...

7.2CVSS7.3AI score0.13434EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•20 views

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions, which stems from improper authentication, where Captive Portal may...

8.8CVSS6.7AI score0.0053EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•30 views

Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞

Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions, which stems from a Captive Portal that could expose sensitive...

7.5CVSS6.6AI score0.00483EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/10/22 2:09 a.m.•19 views

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS8.3AI score0.01446EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
•added 2025/10/21 1:00 p.m.•14 views

Why AI-Powered Firewall Defense Is the Boldest Cybersecurity Shift of 2025

Static firewalls are failing. Discover how AI-powered firewalls predict, adapt, and defend at machine speed — reshaping cybersecurity in 2025 and beyond...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/10/21 12:00 a.m.•22 views

Zyxel ATP series firmware和Zyxel USG FLEX series firmware 安全漏洞

Zyxel ATP series firmware and Zyxel USG FLEX series firmware are both products of the China-based company Zyxel.Zyxel ATP series firmware is a series of firewall firmware.Zyxel USG FLEX series firmware is a series of Zyxel ATP series firmware is a series of firewall firmware. A security...

8.1CVSS9.1AI score0.0546EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/21 12:00 a.m.•26 views

Unspecified Vulnerability in Palo Alto Networks PAN-OS (CNVD-2025-24729)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which can be exploited by an attacker to cause a privileged administrator to bypass system restrictions and execute arbitrary...

7.2CVSS7.5AI score0.00784EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2025/10/20 12:00 a.m.•17 views

The vulnerability of the /cgi-bin/firewall.cgi file, a microprogramming system for Wavlink routers WL-WN579A3, allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/firewall.cgi file of the Wavlink WL-WN579A3 router’s microprogramming system is related to the failure to take measures to neutralize specific elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS6.1AI score0.01813EPSS
SaveExploits1References2Affected Software1
GithubExploit
GithubExploit
•added 2025/10/19 10:18 a.m.•192 views

Exploit for Code Injection in Vmware Spring_Framework

Python Firewall for Spring4Shell CVE-2022-22965 Mitigation...

9.8CVSS8AI score0.99638EPSS
SaveExploits108
Wordfence Blog
Wordfence Blog
•added 2025/10/17 1:24 p.m.•20 views

Wordfence Bug Bounty Program Monthly Report – September 2025

Last month in September 2025, the Wordfence Bug Bounty Program received 374 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the...

8.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/10/16 4:01 p.m.•19 views

CVE-2025-61935

When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS5.8AI score0.00348EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/16 2:51 p.m.•16 views

CVE-2025-59478

When a BIG-IP AFM denial-of-service DoS protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS5.8AI score0.00368EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/16 2:51 p.m.•18 views

CVE-2025-55669

When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS5.8AI score0.00384EPSS
SaveExploits0References1
Rows per page
Query Builder