PT-2025-40931

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to execute arbitrary code. This could lead to a denial of service,...

CVE-2025-60959

The EndRun Technologies Sonoma D12 Network Time Server (GPS) is affected by an OS Command Injection vulnerability in firmware version 6010-0071-000 Ver 4.00 . This flaw allows an attacker to execute arbitrary commands, potentially leading to the disclosure of sensitive information . No specific e...

CVE-2025-60967

A Cross Site Scripting (XSS) vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server (GPS) running F/W 6010-0076-000 Ver 4.00 . This security flaw allows an attacker to execute malicious scripts to gain sensitive information . No information regarding a patched version or s...

CVE-2025-60969

The EndRun Technologies Sonoma D12 Network Time Server (GPS) is affected by a Directory Traversal vulnerability in firmware F/W 6010-0076-000 Ver 4.00 . This flaw allows an attacker to perform path traversal attacks to gain access to sensitive information . While technical details on the specific...

CVE-2025-60964

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60963

The EndRun Technologies Sonoma D12 Network Time Server (GPS) is vulnerable to an OS Command Injection in firmware version 6010-0071-000 Ver 4.00 . This vulnerability allows an attacker to execute arbitrary code, cause a denial of service, gain escalated privileges, and access sensitive informatio...

CVE-2025-60967

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...

CVE-2025-60969: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...

CVE-2025-60964: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

CVE-2025-60967: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...

PT-2025-40922

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A Cross Site Request Forgery CSRF flaw exists in EndRun Technologies Sonoma D12 Network Time Server GPS. Successful exploitation could allow attackers to execute...

PT-2025-40925

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to gain sensitive information through OS Command Injection. The...

PT-2025-40928

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An OS Command Injection issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS. Successful exploitation could allow attackers to gain sensitive...

CVE-2025-60958

The EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically running F/W 6010-0071-000 Ver 4.00 , is susceptible to a Cross Site Scripting (XSS) vulnerability. This security flaw could allow an attacker to gain sensitive information . Currently, there is no information regarding a ...

EUVD-2025-32564

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

PT-2025-40930

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An OS Command Injection issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS. Successful exploitation could allow attackers to execute arbitrary...

CVE-2025-60958

Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...

CVE-2025-60965

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

PT-2025-40923

Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description An issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS that allows attackers to execute arbitrary code, cause a denial of service, gain escalate...

CVE-2025-60960

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...