CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

CVE-2024-11253

A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware version V5.50ABOM.8.5C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a...

Microsoft NTLM security vulnerability

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The followin...

Microsoft Windows NTFS security vulnerabilities

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A security vulnerability exists in Microsoft Windows NTFS. An attacker exploiting this vulnerability could gain access to sensitive...

Zyxel AX7501-B1: Operating System Command Injection Vulnerability

The Zyxel AX7501-B1 is a router from China Heqin Zyxel. An operating system command injection vulnerability exists in Zyxel AX7501-B1 V5.17ABPC.5.3C0 and earlier versions, which stems from a command injection in the zyUtilMailSend function that could lead to the execution of operating system...

Zyxel VMG8825-T50K: Operating System Command Injection Vulnerability

The Zyxel VMG8825-T50K is an Internet access device from China Hopkins Zyxel. An operating system command injection vulnerability exists in Zyxel VMG8825-T50K V5.50ABOM.8.5C0 and earlier versions, which stems from a command injection in the DNSServer parameter in the diagnostic function, which...

War-FTPD 1.65 Denial of Service

War-FTPD version 1.65 proof of concept denial of service exploit that leverages a vulnerability originally discovered in 2024 by Fernando Mengali. ============================================================================================================================================= | Title ...

WS FTP Server 5.0.5 Denial of Service

WS FTP Server version 5.0.5 proof of concept denial of service exploit that leverages a flaw found by Fernando Mengali in 2024. ============================================================================================================================================= | Title : WS FTP Server 5.0...

Safari WebKit XSS

The vulnerability of the Web page rendering module in Safari web browsers for macOS, iOS, iPadOS, VisionOS, tvOS, and WatchOS lies in insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...

PT-2025-10685

Name of the Vulnerable Software and Affected Versions Zyxel AX7501-B1 firmware versions prior to V5.17ABPC.5.3C0 Description A post-authentication command injection issue in the zyUtilMailSend function could allow an authenticated attacker with administrator privileges to execute operating system...

ROS-20250311-01

A vulnerability in the f2fs component of the Linux operating system kernel is related to an incorrect lock in the function f2fshandlecriticalerror in fs/f2fs/super.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in rtl2830pidfilter function ...

Image Capture macOS Unauthorized Access

The vulnerability of the Image Capture application in macOS operating systems relates to a flaw in the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected information...

Wi-Fi operating systems DoS

The vulnerability of Wi-Fi operating systems for macOS, iOS, and iPadOS relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens SCALANCE LPE9403: Operating System Command Injection Vulnerability

Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The SCALANCE LPE9403 6GK5998-3GS00-2AC2 suffers from an operating system command injection vulnerability that originates...

Microsoft Windows Access Control Error Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...

Microsoft Windows exFAT File System security vulnerabilities

Microsoft Windows exFAT File System is a feature of Microsoft Corporation USA that provides a file system. A security vulnerability exists in Microsoft Windows exFAT File System. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

MENNEKES Ladesäule Smart security vulnerabilities

MENNEKES Ladesäule Smart is a smart charging post from MENNEKES. A security vulnerability exists in MENNEKES Ladesäule Smart that stems from improper OS command neutralization, which could lead to command execution...

MENNEKES Ladesäule Smart security vulnerabilities

MENNEKES Ladesäule Smart is a smart charging post from MENNEKES. A security vulnerability exists in MENNEKES Ladesäule Smart that stems from improper OS command neutralization, which could lead to command execution...

Huawei HarmonyOS media library module privilege checksum vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checking vulnerability exists in the Huawei HarmonyOS media library module, which can be exploited by an attacker to compromise confidentiality...