20452 matches found
CVE-2025-21443
The CVE-2025-21443 entry concerns memory corruption in eAVB when processing message content, affecting Qualcomm automotive chipsets. Technical details across connected sources align on a buffer-copy/size-check vulnerability in the eAVB processing path, leading to high-severity impact (CVE metrics...
CVE-2025-21443 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Automotive Vehicle Networks
Memory corruption while processing message content in eAVB...
CVE-2025-21443 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Automotive Vehicle Networks
Memory corruption while processing message content in eAVB...
CVE-2025-21442
CVE-2025-21442 concerns Qualcomm chipsets experiencing memory corruption when transmitting packet mapping information with an invalid header payload size. The vulnerability is described as a memory corruption issue in the handling of header payload sizing during packet mapping transmission. The C...
CVE-2025-21442 Integer Overflow to Buffer Overflow in Automotive Vehicle Networks
Memory corruption while transmitting packet mapping information with invalid header payload size...
CVE-2025-21442 Integer Overflow to Buffer Overflow in Automotive Vehicle Networks
Memory corruption while transmitting packet mapping information with invalid header payload size...
📄 Palo Alto Networks Expedition 1.2.90.1 Privilege Escalation
Palo Alto Networks Expedition version 1.2.90.1 proof of concept exploit that allows for an administrative password reset. - Exploit Title: PoC for Admin Account Password Reset of Palo Alto Networks Expedition tool - Shodan Dork: html:"expedition project" - FOFA Dork: "expedition project" &&...
F5 Networks BIG-IP : Python vulnerability (K000150749)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000150749 advisory. The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as...
Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover
Exploit Title: Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover Shodan Dork: html:"expedition project" FOFA Dork: "expedition project" && iconhash="1499876150" Exploit Author: ByteHunter Email: [email protected] Vulnerable Versions: 1.2 1.2.92 Tested on: 1.2.90.1 & 1.2.75 CVE ...
Juniper Networks J-Web Arbitrary Command Execution
The vulnerability in the J-Web management web interface of Juniper Networks Junos OS relates to the failure to neutralize data in XPath expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Juniper Networks Junos OS Evolved DoS
The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS Evolved operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2025-3031
creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839...
Rockwell Automation Lifecycle Services with Veeam Backup and Replication
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...
Digital China Networks DCME-520 has a security vulnerability
Digital China Networks DCME-520 DCN DCME-520 is a new generation high-performance security gateway with multi-core high performance from Digital China Networks DCN, China. It has excellent performance and powerful data processing capabilities. A security vulnerability exists in Digital China...
F5 Networks BIG-IP : AngularJS XSS vulnerability (K32412075)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K32412075 advisory. angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code...
CVE-2025-23632
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...
CVE-2025-23632
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...
CVE-2025-23632
CVE-2025-23632 affects the WordPress CG Button plugin (Rhizome Networks) up to version 1.0.5.6. It is a Reflected XSS caused by improper input neutralization during web page generation. Exploitation is possible remotely (network access) and requires user interaction. Current connected sources ind...
CVE-2025-23632 WordPress CG Button plugin <= 1.0.5.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...
CVE-2025-23632: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...