124 matches found
CVE-2019-25721 Dräger Infinity M300 VG2.3.1 Network-Based Denial of Service
Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of service vulnerability that allows network-adjacent attackers to repeatedly trigger device reboots by sending malicious requests over the Infinity Network. Attackers can exploit...
CVE-2019-25721 Dräger Infinity M300 VG2.3.1 Network-Based Denial of Service
Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of service vulnerability that allows network-adjacent attackers to repeatedly trigger device reboots by sending malicious requests over the Infinity Network. Attackers can exploit...
CVE-2019-25721
CVE-2019-25721 affects Dräger Infinity M300 patient-worn monitors with software VG2.3.1 and earlier. The issue is a network‑based denial-of-service vulnerability that lets network-adjacent attackers repeatedly trigger device reboots by sending malicious requests over the Infinity Network, forcing...
PT-2026-45813
Name of the Vulnerable Software and Affected Versions Dräger Infinity M300 versions VG2.x and earlier Description A network-based denial of service issue exists that allows attackers with access to the hospital or Infinity Network to repeatedly trigger device reboots. This can lead to the device...
PT-2026-45810
Name of the Vulnerable Software and Affected Versions Dräger Infinity M300 versions prior to VG2.3.2 Description A network-based denial of service issue exists that allows network-adjacent attackers to repeatedly trigger device reboots by sending malicious requests over the Infinity Network. This...
Dräger Infinity M300 资源管理错误漏洞
The Dräger Infinity M300 is a wearable telemetry patient monitoring device developed by the German company Dräger. Versions of the Dräger Infinity M300 prior to version 2.3.1 contained a resource management vulnerability. This vulnerability stemmed from a network-based denial-of-service issue,...
The vulnerability of the microprogrammed software of the Aitemi M300 wireless signal amplifiers (MT02) is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows a hacker to execute arbitrary code.
The vulnerability of the microprogrammed software of Aitemi M300 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...
📄 Shenzhen Aitemi M300 Wi-Fi Repeater Remote Code Execution
Shenzhen Aitemi M300 Wi-Fi Repeater unauthenticated proof of concept remote code execution exploit that leverages the time parameter in protocol.csp. ============================================================================================================================================= | Tit...
Shenzhen Aitemi M300 Wi-Fi Repeater – Unauthenticated Remote Command Execution via `time` Parameter
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
EUVD-2025-23925
Malicious code in bioql PyPI...
EUVD-2025-18955
Malicious code in bioql PyPI...
EUVD-2025-18956
Malicious code in bioql PyPI...
EUVD-2025-18959
Malicious code in bioql PyPI...
EUVD-2025-23926
Malicious code in bioql PyPI...
EUVD-2025-23923
Malicious code in bioql PyPI...
EUVD-2025-18960
Malicious code in bioql PyPI...
EUVD-2025-18958
Malicious code in bioql PyPI...
Exploit for CVE-2025-34152
⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi Repeater RCE...
VulnCheck KEV: CVE-2025-34152
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
Metasploit Wrap-Up 09/12/25
New LightHouse Studio RCE module This week we've added a new module that exploits an unauthenticated template injection vulnerability CVE-2025-34300 in Sawtooth Software’s Lighthouse Studio, allowing arbitrary Perl execution via survey templates in versions prior to 9.16.14. This module has the...