2856 matches found
CVE-2025-35452: Use of Hard-coded Credentials
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface...
CVE-2025-35451: Use of Hard-coded Credentials
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be...
Linux Distros Unpatched Vulnerability : CVE-2019-16141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the oncecell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy. CVE-2019-16141 Note that Nessus relies on t...
Malicious code in @zalastax/nolb-_pan (npm)
The package @zalastax/nolb-pan was found to contain malicious code...
Malicious code in @zalastax/nolb-pan (npm)
The package @zalastax/nolb-pan was found to contain malicious code...
MAL-2025-10305 Malicious code in @zalastax/nolb-_pan (npm)
The package @zalastax/nolb-pan was found to contain malicious code...
MAL-2025-12926 Malicious code in @zalastax/nolb-pan (npm)
The package @zalastax/nolb-pan was found to contain malicious code...
CVE-2025-2182
PAN-OS MACsec vulnerability (CVE-2025-2182) affects PA-7500 Series in NGFW clusters. The issue stems from the MACsec protocol implementation, allowing cleartext exposure of the connectivity association key (CAK). A CAK holder can read messages exchanged between devices within a clustered NGFW, wh...
PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)
A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key CAK. This issue is only applicable to PA-7500 Series devices which are in an NGFW cluster. A user who possesses this key can read messages...
CVE-2025-2182: Cleartext Storage of Sensitive Information
A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key CAK. This issue is only applicable to PA-7500 Series devices which are in an NGFW cluster. A user who possesses this key can read messages...
VulnCheck KEV: CVE-2020-2034
An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This issue can not be exploited if...
The vulnerability of the PAN-OS operating system, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands with root privileges...
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
Informational Bulletin: OSS CVEs Fixed in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software OSS CVEs as they relate to PAN-OS. While it was not determined that these CVEs have any significant impact on PAN-OS, they have been fixed out of an abundance of caution. Work around: No work...
Exploit for CVE-2016-2434
About This is where I will post analysis of Public Exploits, or some of my 1day exploits. Public exploit analysis - Personally I think the best way to learn a public exploit is by understanding it line-by-line until I can understand the exploit to the fullest. I will post some of these...
VulnCheck KEV: CVE-2025-0107
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management...
Exploit for CVE-2025-0133
Description: It is a POC for CVE-2025-0133 that is applicab...
The vulnerability of the command-line interface (CLI) of the PAN-OS operating system allows a hacker to bypass existing security restrictions and execute arbitrary commands.
The vulnerability of the command-line interface CLI of the PAN-OS operating system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary commands...
The vulnerability in the web interface of the operating system PAN-OS, which allows a perpetrator to execute arbitrary commands
The vulnerability in the web interface of the operating system PAN-OS is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...