3667 matches found
H3C Magic M 安全漏洞
H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M that stems from the use of a default password that could lead to remote execution of arbitrary code...
CVE-2025-57578
A security vulnerability exists in the H3C Magic M series of wireless routers, specifically affecting version M2V100R006 . The issue stems from the use of a default password , which allows a remote attacker to achieve remote code execution (RCE) . To mitigate this risk, it is recommended to chang...
Linux Distros Unpatched Vulnerability : CVE-2021-40327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on...
MAL-2025-42993 Malicious code in @zalastax/nolb-_dsr-rollback-org-m (npm)
The package @zalastax/nolb-dsr-rollback-org-m was found to contain malicious code...
OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.
...
HPESBST04945 rev.1 - HPE M-Series Switches Using NVIDIA Cumulus Software, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SN4600cM 100GbE 64QSFP28 Power to Connector Airflow Switch SN4600cM with NVIDIA Cumulus - NVIDIA Cumulus 5.9.2, and 5.11.1 HPE SN2100M 100GbE 16QSFP28 Power to Connector...
Linux Distros Unpatched Vulnerability : CVE-2020-15007
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because i...
CVE-2025-36729 RACOM M!DGE2 Privilege Escalation via SDK Testing Endpoint
A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password. This vulnerability also allows the user to give themselves shell access with the root gid...
CVE-2025-9470
CVE-2025-9470 affects itsourcecode Apartment Management System 1.0. The vulnerability lies in /management/add_m_committee.php where manipulation of the ID parameter enables SQL injection, potentially exploitable remotely. The exploit has been published and multiple sources describe a SQL‑injectio...
itsourcecode Apartment Management System 安全漏洞
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /management/addmcommittee.php. An attacker can exploit th...
Malicious code in @faisal.m.zayed/saudi-riyal-font (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41913 Malicious code in @faisal.m.zayed/saudi-riyal-font (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-9415: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available...
The vulnerability of the ssdpcgi_main function in D-Link DIR-860L router’s software allows a hacker to execute arbitrary commands.
The vulnerability of the ssdpcgimain function in D-Link DIR-860L router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands b...
M-Files 25.6.14925.0 Path Traversal
This repository contains a proof-of-concept exploit in C for a suspected path traversal vulnerability in M‑Files version 25.6.14925.0. It attempts to read sensitive files e.g. /etc/passwd by injecting traversal payloads into REST API endpoints...
Malicious code in judith-m (npm)
The package judith-m was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-lib-m (npm)
The package @zalastax/nolb-lion-lib-m was found to contain malicious code...
Malicious code in tantu-fe-m (npm)
The package tantu-fe-m was found to contain malicious code...