CVE-2025-57105

CVE-2025-57105 affects the D-Link DI-7400G+ router. The vulnerability resides in the jhttpd-based code paths mng_platform.asp and wayos_ac_server.asp, where the GET parameter addr/ac_mng_srv_host is written to NVRAM and then passed to system(), enabling command execution. Prerequisites observed i...

PT-2025-34445 · D Link · Di-7400G+ Router

Name of the Vulnerable Software and Affected Versions: DI-7400G+ router affected versions not specified Description: The DI-7400G+ router contains a command injection flaw that enables attackers to execute arbitrary commands on the device. This issue affects the sub 478D28 function within mng...

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...

The vulnerability of the Dell Encryption endpoint protection software (previously known as Dell Data Protection) and the Dell Security Management Server, related to improper handling of symbolic links before accessing files, allows attackers to exploit their privileges.

The vulnerability of the Dell Encryption endpoint protection software previously known as Dell Data Protection and the Dell Security Management Server security management server lies in the improper handling of symbolic links before accessing files. Exploiting this vulnerability can allow attacke...

The vulnerability of the XtremIO Management Server (XMS) on the Dell XtremIO storage platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the XtremIO Management Server XMS on the Dell XtremIO storage platform involves the disclosure of information through log files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-36611

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-36611

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-36611

Dell Encryption and Dell Security Management Server contain an Improper Link Resolution Before File Access ("Link Following") vulnerability affecting versions prior to 11.11.0. A local attacker could potentially escalate privileges by abusing link resolution behavior. The issue is fixed in versio...

Tenable Patch Management Server < 9.3.968.19 SQLi

The version of Tenable Patch Management Server installed on the remote host is prior to 9.3.968.19. It is, therefore, affected by an SQL injection vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL...

CVE-2025-53082

An 'Arbitrary File Deletion' in Samsung DMSData Management Server allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...

CVE-2025-53081

An 'Arbitrary File Creation' in Samsung DMSData Management Server allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...

CVE-2025-53078

Deserialization of Untrusted Data in Samsung DMSData Management Server allows attackers to execute arbitrary code via write file to system...

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

CVE-2025-53079

Absolute Path Traversal in Samsung DMSData Management Server allows authenticated attacker Administrator to read sensitive files...

CVE-2025-53082

An 'Arbitrary File Deletion' in Samsung DMSData Management Server allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...

CVE-2025-53081

An 'Arbitrary File Creation' in Samsung DMSData Management Server allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...

CVE-2025-53080

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in Samsung DMSData Management Server allows authenticated attackers to create arbitrary files in unintended locations on the filesystem...

PT-2025-31171 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMSData Management Server affected versions not specified Description: An absolute path traversal issue exists in Samsung DMSData Management Server. An authenticated attacker with Administrator privileges can read sensitive files...

SAMSUNG DMS 安全漏洞

SAMSUNG DMS is a data management server from Samsung South Korea. A security vulnerability exists in SAMSUNG DMS that originates from arbitrary file creation and could result in the creation of arbitrary files on the file system...

PT-2025-31398 · Dell · Dell Security Management Server +1

Name of the Vulnerable Software and Affected Versions: Dell Encryption and Dell Security Management Server versions prior to 11.11.0 Description: Dell Encryption and Dell Security Management Server are affected by an Improper Link Resolution Before File Access 'Link Following' issue. A local...