Blu-Castle BCUM221E 安全漏洞

The Blu-Castle BCUM221E is a wireless router from the Spanish company Blu-Castle. A security vulnerability exists in the Blu-Castle BCUM221E version 1.0.0P220507, which stems from a cross-site request forgery issue in the management web interface that could lead to data disclosure or execution of...

PT-2025-43759

Name of the Vulnerable Software and Affected Versions ajayrandhawa User-Management-PHP-MYSQL versions prior to fedcf58797bf2791591606f7b61fdad99ad8bff1 Description A flaw exists within the User Management Interface component of the software, specifically concerning file uploads. Manipulation of t...

Siemens RUGGEDCOM ROS Devices Protection Mechanism Failure (CVE-2025-41224)

The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credentials to gain access to...

EUVD-2025-35587

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...

CVE-2025-23299

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...

EUVD-2023-60006

In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potential OOB in raid1removedisk If rddev-raiddisk is greater than mddev-raiddisks, there will be an out-of-bounds in raid1removedisk. We have already found similar reports as follows: 1 commit d17f744e883b...

CVE-2025-23299

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...

CVE-2025-23299

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code...

CVE-2025-23299

The CVE-2025-23299 entry affects NVIDIA Bluefield and ConnectX products with a vulnerability in the management interface that could let a high-privilege attacker execute arbitrary code locally. The issue is documented across multiple sources, and NVIDIA’s security bulletin lists concrete remediat...

CVE-2025-6541

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

NVIDIA ConnectX和NVIDIA BlueField 缓冲区错误漏洞

NVIDIA ConnectX and NVIDIA BlueField are both products of NVIDIA Corporation.NVIDIA ConnectX is a family of Intelligent Network Interface cards.NVIDIA BlueField is a family of data processing units. A buffer error vulnerability exists in NVIDIA ConnectX and NVIDIA BlueField, which stems from a fl...

CVE-2025-6542

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-6541

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-6541

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-6542

CVE-2025-6542 affects TP-Link Omada Gateway devices and is described as an OS command injection vulnerability that can be triggered by a remote unauthenticated attacker via multiple parameters and the web management interface. The connected coverage confirms this is a remote code execution vector...

EUVD-2025-35117

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-6541 OS command injection using information obtained from the web management interface

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

EUVD-2025-35118

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-6541

CVE-2025-6541 affects TP-Link Omada gateway devices. The flaw allows command injection in the device OS via the web management interface, exploitable by an authenticated user to run arbitrary commands. Impact is high per CVSS. TP-Link issued firmware updates addressing this and similar flaws; use...

CVE-2025-6541 OS command injection using information obtained from the web management interface

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...