Lucene search
+L

227 matches found

RedhatCVE
RedhatCVE
added 2025/11/10 12:22 p.m.16 views

CVE-2025-12916

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...

9.8CVSS6.9AI score0.05063EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/09 12:30 a.m.12 views

EUVD-2025-38438

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...

6.5CVSS6.4AI score0.05063EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/09 12:15 a.m.12 views

CVE-2025-12916

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...

9.8CVSS0.05063EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/09 12:15 a.m.8 views

CVE-2025-12916

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...

9.8CVSS5.5AI score0.05063EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/11/09 12:00 a.m.12 views

Sangfor Operation and Maintenance Security 命令注入漏洞

Sangfor Operation and Maintenance Security is an operation and maintenance security management system from China's Sangfor. A command injection vulnerability exists in Sangfor Operation and Maintenance Security version 3.0, which stems from an incorrect manipulation of the parameter loginUrl in t...

9.8CVSS6.8AI score0.05063EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/08 11:32 p.m.58 views

CVE-2025-12916

CVE-2025-12916 affects Sangfor Operation and Maintenance Security Management System 3.0, specifically the Frontend component’s /fort/portal_login. The vulnerability arises from manipulating the loginUrl argument, enabling remote command injection. Public disclosures indicate exploitation is possi...

9.8CVSS6.7AI score0.05063EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/11/08 11:32 p.m.21 views

CVE-2025-12916 Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...

6.5CVSS0.05063EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/11/08 11:32 p.m.4 views

CVE-2025-12916 Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...

6.5CVSS6.4AI score0.05063EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/08 12:00 a.m.15 views

PT-2025-45573

Name of the Vulnerable Software and Affected Versions Sangfor Operation and Maintenance Security Management System versions prior to 3.0.11 Description A command injection issue exists in the Sangfor Operation and Maintenance Security Management System. The issue is related to the manipulation of...

9.8CVSS6.5AI score0.05063EPSS
SaveExploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-18539

Malware in sbrugna...

10CVSS9.5AI score0.04599EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-35163

Malicious code in bioql PyPI...

9.8CVSS7.2AI score0.18206EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.27 views

EUVD-2025-16224

Malicious code in bioql PyPI...

7.3CVSS6.9AI score0.00308EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-28042

Malicious code in bioql PyPI...

5.5CVSS5.7AI score0.00278EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2025-18973

Malicious code in bioql PyPI...

10CVSS6.6AI score0.06969EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2025-18829

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00148EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-59775

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00517EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2023-35162

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00646EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-35164

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.12816EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/08/30 6:18 p.m.10 views

CVE-2023-7307

Sangfor Behavior Management System also referred to as DC Management System in Chinese-language documentation contains an XML external entity XXE injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafted XML data containing external entity...

8.7CVSS7.6AI score0.00517EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/27 10:15 p.m.11 views

CVE-2023-7307

Sangfor Behavior Management System also referred to as DC Management System in Chinese-language documentation contains an XML external entity XXE injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafted XML data containing external entity...

8.7CVSS0.00517EPSS
SaveExploits0References4
Rows per page
Query Builder