1490 matches found
EUVD-2025-37882
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2025-41336
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'...
CVE-2025-12137 Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.14.16. This is due to the plugin's REST API endpoint accepting arbitrary absolute file paths without proper validation in the...
CVE-2020-36857
Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not...
CVE-2025-63422
Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...
CVE-2025-33182
NVIDIA Jetson Linux contains a vulnerability in UEFI, where improper authentication may allow a privileged user to cause corruption of the Linux Device Tree. A successful exploitation of this vulnerability might lead to data tampering, denial of service...
CVE-2025-53768
CVE-2025-53768 corresponds to an Xbox-related vulnerability in the IStorageService component, described as a use-after-free that enables an authorized attacker to elevate privileges locally. The connected NCSC advisory references this CVE as an Xbox issue with impact class “Obtaining Increased Ri...
HPE Aruba Networking EdgeConnect OS 安全漏洞
HPE Aruba Networking EdgeConnect OS is an operating system from HPE America. A security vulnerability exists in HPE Aruba Networking EdgeConnect OS that stems from an arbitrary file write vulnerability in the web-based management interface, which could lead to the upload of arbitrary files and...
Tomofun Furbo 360和Tomofun Furbo Mini 访问控制错误漏洞
Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. An access control error vulnerability exists in the Tomofun Furbo 360 FB0035FW036 and earlier versions and the Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a malicious individual to gain unauthorized access to confidential information.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software for managing network services is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor ...
CVE-2025-59146
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. An authenticated Server-Side Request Forgery SSRF vulnerability exists in versions prior to 0.9.0.5. A feature within the application allows authenticated users to submit a URL for the server to...
EUVD-2019-10199
Malware in sbrugna...
EUVD-2008-5307
Malware in sbrugna...
EUVD-2014-0681
Malware in sbrugna...
EUVD-2019-7642
Malware in sbrugna...
EUVD-2020-4813
Malware in sbrugna...
EUVD-2015-4289
Malware in sbrugna...
EUVD-2013-3358
Malware in sbrugna...