Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:22 a.m.•15 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS6.3AI score0.02087EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/10 12:28 a.m.•25 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS7.5AI score0.00644EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/09 9:31 p.m.•18 views

EUVD-2025-202318

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

7AI score0.00644EPSS
SaveExploits1References4
NVD
NVD
•added 2025/12/09 7:15 p.m.•18 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS0.00644EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/12/09 12:00 a.m.•10 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

6.3AI score0.00644EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/09 12:00 a.m.•42 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

0.00644EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•7 views

CVE-2025-65882: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS6.2AI score0.00644EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•19 views

PT-2025-50216

Name of the Vulnerable Software and Affected Versions openmptcprouter versions through 0.64 Description An issue exists in openmptcprouter through version 0.64, specifically within the file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c and the create xor ipad opad function. This...

9.8CVSS6.9AI score0.00644EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/09 12:00 a.m.•70 views

CVE-2025-65882

A security vulnerability exists in openmptcprouter versions through 0.64 . The flaw is located in the common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c file within the create_xor_ipad_opad function. This issue allows an attacker to potentially write arbitrary files or execute arbitra...

9.8CVSS6.3AI score0.00644EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2025/12/09 12:00 a.m.•22 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS7.5AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•17 views

OpenMPTCProuter 安全漏洞

OpenMPTCProuter is a TCP Internet connection software by the individual developer Ycarus Yannick Chabanois. A security vulnerability exists in OpenMPTCProuter version 0.64 and earlier versions, which originates from the possibility of writing arbitrary files or executing arbitrary commands...

9.8CVSS6.7AI score0.00644EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-18157

Malware in sbrugna...

5.9CVSS6.3AI score0.02087EPSS
SaveExploits1References5
CNVD
CNVD
•added 2021/06/24 12:00 a.m.•16 views

openmptcprouter-vps-admin authorization issue vulnerability

openmptcprouter-vps-admin is an application. An OpenMPTCProuter API is based on FastAPI. A security vulnerability in Omr-admin.py in openmptcprouter-vps-admin version 0.57.3 and earlier can be exploited by remote attackers to guess passwords via a timing attack...

5.9CVSS6.9AI score0.02087EPSS
SaveExploits1References1
OSV
OSV
•added 2021/05/06 1:15 p.m.•29 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS7.1AI score0.02087EPSS
SaveExploits1References4
NVD
NVD
•added 2021/05/06 1:15 p.m.•39 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS0.02087EPSS
SaveExploits1References4
Prion
Prion
•added 2021/05/06 1:15 p.m.•25 views

Design/Logic Flaw

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

4.3CVSS5.8AI score0.02087EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2021/05/06 1:15 p.m.•8 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS6.4AI score0.02087EPSS
SaveExploits1References5
Mend
Mend
•added 2021/05/06 11:45 a.m.•3 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

8.2CVSS0.02087EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/05/06 11:45 a.m.•50 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

6AI score0.02087EPSS
SaveExploits1References4
CVE
CVE
•added 2021/05/06 11:45 a.m.•49 views

CVE-2021-31245

CVE-2021-31245 affects openmptcprouter-vps-admin 0.57.3 and earlier. The issue is a timing-based password comparison in omr-admin.py that compares the user-supplied password with the original password in a length-dependent way, enabling remote attackers to guess the password through timing observ...

5.9CVSS5.7AI score0.02087EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder