Lucene search
K

96 matches found

Nuclei
Nuclei
added yesterday12 views

Four-Faith F3x36 - Authentication Bypass

Four-Faith F3x36 router with firmware v2.0.0 contains an authentication bypass caused by hard-coded credentials in the administrative web server, letting attackers with knowledge of credentials gain administrative access via crafted HTTP requests. id: CVE-2024-9643 info: name: Four-Faith F3x36 -...

9.8CVSS7.8AI score0.1585EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:27 a.m.7 views

CVE-2019-12168

Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell aka Administration Commands screen...

9CVSS8.1AI score0.0646EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/10/13 12:0 a.m.8 views

VulnCheck KEV: CVE-2024-9643

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to...

9.8CVSS5.8AI score0.1585EPSS
In wildExploits0References183
RedhatCVE
RedhatCVE
added 2025/10/07 1:23 p.m.2 views

CVE-2025-11336

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...

6.9CVSS6.3AI score0.00071EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-3817

Malware in sbrugna...

9CVSS7.2AI score0.0646EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/06 3:31 p.m.2 views

EUVD-2025-32537

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is...

6.9CVSS6.2AI score0.00071EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/06 3:31 p.m.3 views

EUVD-2025-32532

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...

6.9CVSS5.9AI score0.00071EPSS
Exploits0References5
NVD
NVD
added 2025/10/06 2:15 p.m.1 views

CVE-2025-11336

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...

6.9CVSS0.00071EPSS
Exploits0References4
NVD
NVD
added 2025/10/06 2:15 p.m.2 views

CVE-2025-11337

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is...

6.9CVSS0.00071EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/06 1:32 p.m.6 views

CVE-2025-11337 Four-Faith Water Conservancy Informatization Platform download.do;othersusrlogout.do path traversal

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is...

6.9CVSS0.00071EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/06 1:32 p.m.1 views

CVE-2025-11337 Four-Faith Water Conservancy Informatization Platform download.do;othersusrlogout.do path traversal

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is...

6.9CVSS6.3AI score0.00071EPSS
Exploits0References4
CVE
CVE
added 2025/10/06 1:32 p.m.6 views

CVE-2025-11337

The CVE-2025-11337 issue affects Four-Faith Water Conservancy Informatization Platform (versions up to 2.2). A path traversal vulnerability exists in the handling of the fileName parameter in endpoints such as /aloneReport/index.do/../../aloneReport/download.do and /othersusrlogout.do, enabling r...

6.9CVSS6.3AI score0.00071EPSS
Exploits0References4
CVE
CVE
added 2025/10/06 1:2 p.m.7 views

CVE-2025-11336

CVE-2025-11336 affects the Four-Faith Water Conservancy Informatization Platform (up to 2.2; vendor advisories reference 2.3+). A path traversal flaw exists in the handling of the fileName parameter for the endpoint involving the file path /stAlarmConfigure/index.do/../../aloneReport/download.do;...

6.9CVSS6.1AI score0.00071EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/06 1:2 p.m.6 views

CVE-2025-11336 Four-Faith Water Conservancy Informatization Platform download.do;otherlogout.do path traversal

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...

6.9CVSS0.00071EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/06 1:2 p.m.1 views

CVE-2025-11336 Four-Faith Water Conservancy Informatization Platform download.do;otherlogout.do path traversal

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...

6.9CVSS6.1AI score0.00071EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.1 views

Four-Faith Water Conservancy Informatization Platform 路径遍历漏洞

Four-Faith Water Conservancy Informatization Platform is a water conservancy informatization system from Four-Faith. A path traversal vulnerability exists in Four-Faith Water Conservancy Informatization Platform version 2.2 and prior versions, which stems from an incorrect manipulation of the...

6.9CVSS5.8AI score0.00071EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.2 views

Four-Faith Water Conservancy Informatization Platform 路径遍历漏洞

Four-Faith Water Conservancy Informatization Platform is a water conservancy informatization system from Four-Faith. A path traversal vulnerability exists in Four-Faith Water Conservancy Informatization Platform version 2.2 and prior versions, which stems from an incorrect manipulation of the...

6.9CVSS5.8AI score0.00071EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.2 views

PT-2025-40893

Name of the Vulnerable Software and Affected Versions Four-Faith Water Conservancy Informatization Platform versions prior to 2.3 Description A security issue exists in Four-Faith Water Conservancy Informatization Platform. The issue involves path traversal due to manipulation of the fileName...

6.9CVSS5AI score0.00071EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.3 views

PT-2025-40894

Name of the Vulnerable Software and Affected Versions Four-Faith Water Conservancy Informatization Platform versions prior to 2.3 Description A path traversal issue exists in Four-Faith Water Conservancy Informatization Platform. The issue affects files including...

6.9CVSS5.3AI score0.00071EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-32263

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00052EPSS
Exploits0References4
Rows per page
Query Builder