Lucene search
+L

3088 matches found

CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•15 views

iWT FaceSentry Access Control System 安全漏洞

The iWT FaceSentry Access Control System is an iWT open source application. It provides an access control function. A security vulnerability exists in iWT FaceSentry Access Control System version 6.4.8, which stems from an authenticated remote command injection in the pingTest.php and...

8.8CVSS7.5AI score0.02608EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•25 views

PT-2025-53329

Name of the Vulnerable Software and Affected Versions FaceSentry version 6.4.8 Description FaceSentry 6.4.8 has a remote command injection issue in the pingTest.php and tcpPortTest.php scripts. An attacker with authentication can inject and execute arbitrary shell commands with root privileges...

8.8CVSS8.2AI score0.02608EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/12/23 5:29 p.m.•12 views

EUVD-2025-204880

Malicious code in @aa-techops-ui/ping-authentication npm...

6.6AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/12/23 5:29 p.m.•13 views

Malicious Package

Overview @aa-techops-ui/ping-authentication is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/23 5:29 p.m.•12 views

MAL-2025-192745 Malicious code in @aa-techops-ui/ping-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d523ddbefc7a817d1b6a431d5f9d0aca24fecc12ef57ce37915df0a88af3f132 The package @aa-techops-ui/ping-authentication was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
Redos
Redos
•added 2025/12/23 12:00 a.m.•10 views

ROS-20251223-7312

A vulnerability in the ICMP Echo Reply packet of the ping utility is related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.5CVSS6.9AI score0.01745EPSS
SaveExploits1
Packet Storm News
Packet Storm News
•added 2025/12/22 12:00 a.m.•16 views

ReGAIN: Retrieval-Grounded AI Framework for Network Traffic Analysis

Modern networks generate vast, heterogeneous traffic that must be continuously analyzed for security and performance. Traditional network traffic analysis systems, whether rule-based or machine learning-driven, often suffer from high false positives and lack interpretability, limiting analyst...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•14 views

EulerOS Virtualization 2.13.1 : iputils (EulerOS-SA-2025-2545)

According to the versions of the iputils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ping in iputils before 20250602 allows a denial of service application error in adaptive ping mode or incorrect data collection via...

6.5CVSS6.6AI score0.01745EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/12/15 2:35 p.m.•16 views

CVE-2025-14518

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to...

9.8CVSS6.6AI score0.00348EPSS
SaveExploits3References1
OSV
OSV
•added 2025/12/11 3:02 p.m.•16 views

CVE-2025-14518 PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to...

5.3CVSS6.2AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/12/11 3:02 p.m.•12 views

CVE-2025-14518 PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to...

6.5CVSS6.5AI score0.00348EPSS
SaveExploits3References6
Cvelist
Cvelist
•added 2025/12/04 9:45 p.m.•46 views

CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

8.6CVSS0.00622EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/04 9:45 p.m.•9 views

CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

8.6CVSS8AI score0.00622EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/04 9:45 p.m.•32 views

CVE-2025-12196

CVE-2025-12196 affects WatchGuard Fireware OS CLI with an authenticated privileged user potentially executing arbitrary code due to an out-of-bounds write. Affected versions are Fireware OS 12.0–12.11.4, 12.5–12.5.13, and 2025.1–2025.1.2. The connected PT-Security advisory provides concrete detai...

8.6CVSS8AI score0.00622EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/12/04 9:16 p.m.•13 views

CVE-2025-27935

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication...

8.6CVSS0.00509EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/04 8:38 p.m.•62 views

CVE-2025-27935

The CVE-2025-27935 issue concerns the OTP Integration Kit for PingFederate. According to connected sources, it fails to enforce HTTP method validation and state validation, allowing the server to advance authentication without verifying the OTP and effectively bypassing multi-factor authenticatio...

8.6CVSS6.7AI score0.00509EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/12/04 12:00 a.m.•25 views

A Novel Trust-Based DDoS Cyberattack Detection Model for Smart Business Environments

As the frequency and complexity of Distributed Denial-of-Service DDoS attacks continue to increase, the level of threats posed to Smart Internet of Things SIoT business environments have also increased. These environments generally have several interconnected SIoT systems and devices that are...

6.6AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/12/04 12:00 a.m.•16 views

Ping Identity One-Time Passcode Integration Kit for PingFederate 安全漏洞

Ping Identity One-Time Passcode Integration Kit for PingFederate is a suite of software tools and adapters from Ping Identity USA. A security vulnerability exists in Ping Identity One-Time Passcode Integration Kit for PingFederate that stems from not properly validating the HTTP method and state,...

8.6CVSS6.6AI score0.00509EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/03 2:02 p.m.•16 views

CVE-2025-11787

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS', 'CheckPing' and 'TraceRoute' functions...

8.8CVSS7.5AI score0.0101EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/02 1:15 p.m.•19 views

CVE-2025-11787

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS', 'CheckPing' and 'TraceRoute' functions...

8.8CVSS0.0101EPSS
SaveExploits0References1
Rows per page
Query Builder