Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/01/06 6:51 a.m.2 views

CVE-2025-67397

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

9.1CVSS7.6AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 7:15 p.m.1 views

CVE-2025-67397

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

9.1CVSS0.00077EPSS
Exploits0References2
OSV
OSV
added 2026/01/05 7:15 p.m.1 views

CVE-2025-67397

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

9.1CVSS6.2AI score0.00077EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.1 views

Passy 安全漏洞

Passy is a physical access management platform from Passy, an Italian company. A security vulnerability exists in Passy version 1.6.3 that originates from a specially crafted HTTP request and could lead to the execution of arbitrary commands...

9.1CVSS6.6AI score0.00077EPSS
Exploits0References3
CVE
CVE
added 2026/01/05 12:0 a.m.8 views

CVE-2025-67397

Passy v1.6.3 is affected by CVE-2025-67397. A vulnerability allows a remote authenticated attacker to execute arbitrary commands through a crafted HTTP request using a specific payload injection, with impact reported as total (high risk). Root cause details are not fully disclosed in the provided...

9.1CVSS7.2AI score0.00077EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/01/05 12:0 a.m.2 views

EUVD-2026-0804

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

9.1CVSS7.1AI score0.00077EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/05 12:0 a.m.21 views

CVE-2025-67397

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

0.00077EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/05 12:0 a.m.1 views

CVE-2025-67397

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection...

7.2AI score0.00077EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.2 views

PT-2026-1325

Name of the Vulnerable Software and Affected Versions Passy version 1.6.3 Description A flaw exists in Passy that could allow a remote attacker to execute arbitrary commands. This can occur through the serial interface by sending a specific code sequence. Additionally, a remote authenticated...

9.1CVSS7.2AI score0.00077EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-53766

Malicious code in bioql PyPI...

4.3CVSS9AI score0.00226EPSS
Exploits0References1
Rows per page
Query Builder