Lucene search
+L

2024 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/29 12:00 a.m.•4 views

CVE-2025-9677: Improper Export of Android Application Components

A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown function of the file AndroidManifest.xml of the component com.duige.hzw.multilingual. The manipulation results in improper export of android application components. The attack needs t...

5.5CVSS4.9AI score0.00278EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•22 views

The vulnerability of microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 models lies in the lack of measures taken to neutralize special elements. This allows intruders to exploit their privileges.

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 model is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to enhance their...

8.4CVSS7.3AI score0.00296EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•14 views

The vulnerability of microprogramming software for Phoenix AXC F 1152, AXC F 2152, AXC F 3152, BPC 9102S, and RFC 4072S arises from incorrect definition of the link before accessing the file. This allows attackers to gain read, write, or execute access to the file.

The vulnerability of microprogrammed software in controllers such as Phoenix AXC F 1152, AXC F 2152, AXC F 3152, BPC 9102S, and RFC 4072S is related to incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain read, write, or...

9CVSS5.8AI score0.00602EPSS
SaveExploits0References2Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•17 views

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in insufficient validation of input data. This allows attackers to elevate their privileges to the root level.

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from insufficient validation of input data. Exploiting this vulnerability could...

7.8CVSS5.8AI score0.00145EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•20 views

The vulnerability of the Eichrecht() function in the microprogrammable control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, allows a intruder to trigger a service failure.

The vulnerability of the Eichrecht function in microprogrammed control modules for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, is related to insufficient validation of input data. Exploitin...

5.3CVSS5.8AI score0.00426EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•14 views

The vulnerability of the microprogrammed software of modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to insufficient control of resources with dynamic management. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, the CHARX SEC-3000, is related to insufficient control of resources with dynamic management. Exploiting this vulnerability could allow an...

10CVSS6.8AI score0.00753EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•12 views

The vulnerability of microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 model lies in the unsafe initialization of resources. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 model is related to unsafe initialization of resources. Exploiting this vulnerability could allow an attacker operating remotel...

8.8CVSS5.8AI score0.00348EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•27 views

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the lack of access control mechanisms. This allows attackers to elevate their privileges to the root level.

The vulnerability of the microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from deficiencies in access control. Exploiting this vulnerability could allow...

7.8CVSS5.8AI score0.0013EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•15 views

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 models lies in the absence of authentication procedures, allowing unauthorized access to read or write data.

The vulnerability of the microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to the absence of authentication procedures. Exploiting this vulnerability could allow an intruder to gain unauthorized access to re...

8.8CVSS7.3AI score0.00361EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•24 views

The vulnerability of the Eichrecht() function in microprogrammed software-based modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 models allows a intruder to influence the integrity and accessibility of protected information.

The vulnerability of the Eichrecht function in microprogrammed control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the copying of buffers without checking th...

8.5CVSS5.8AI score0.00402EPSS
SaveExploits0References2Affected Software4
Positive Technologies
Positive Technologies
•added 2025/08/29 12:00 a.m.•14 views

PT-2025-35321

Name of the Vulnerable Software and Affected Versions: Modo Legend of the Phoenix versions through 1.0.5 Description: A security flaw exists in Modo Legend of the Phoenix due to improper export of android application components. The affected element is a function within the AndroidManifest.xml fi...

5.3CVSS5AI score0.00278EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/08/29 12:00 a.m.•14 views

Modo Legend of the Phoenix 安全漏洞

Modo Legend of the Phoenix is a mobile game by China Modo. A security vulnerability exists in Modo Legend of the Phoenix 1.0.5 and earlier versions, which stems from improper component export in the file AndroidManifest.xml and could lead to a local attack...

5.5CVSS5.2AI score0.00278EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•16 views

The vulnerability of the CE Phoenix e-commerce software (CE PhoenixCart) lies in the use of cookies to store confidential information without the HttpOnly flag. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the CE Phoenix e-commerce software CE PhoenixCart is related to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks remotely...

7.5CVSS5.6AI score0.00249EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•12 views

The vulnerability of the CE Phoenix e-commerce software (CE PhoenixCart) lies in the lack of authentication for a critical function, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the CE Phoenix e-commerce software CE PhoenixCart is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

5.5CVSS5.8AI score0.00156EPSS
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in @zalastax/nolb-_phoenix-plugin-registry_w (npm)

The package @zalastax/nolb-phoenix-plugin-registryw was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in @zalastax/nolb-_phoenix-plugin-registry_x (npm)

The package @zalastax/nolb-phoenix-plugin-registryx was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in greatfilter-ablation-phoenix-shelljs (npm)

The package greatfilter-ablation-phoenix-shelljs was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in ophiuchus-phoenix-rimraf-convict (npm)

The package ophiuchus-phoenix-rimraf-convict was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•5 views

Malicious code in phoenix-fermion-markdownlint-holography (npm)

The package phoenix-fermion-markdownlint-holography was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in phoenix_12qwt_11wmc_alchemy (npm)

The package phoenix12qwt11wmcalchemy was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder