Siemens SENTRON 7KT PAC1260 Data Manager 访问控制错误漏洞

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. An Access Control Error vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager, which originates from an unauthenticated SSH service enabled endpoint, and can be...

Red Hat JBoss Enterprise Application Platform和Red Hat Wildfly 代码问题漏洞

Red Hat JBoss Enterprise Application Platform EAP and Red Hat Wildfly are both products of Red Hat, Inc.Red Hat JBoss Enterprise Application Platform is an open source, J2EE-based middleware platform. J2EE-based middleware platform. The platform is mainly used for building, deploying and hosting...

CVE-2025-20120

CVE-2025-20120 describes a stored cross-site scripting (XSS) vulnerability in the web-based management interfaces of Cisco’s EPNM and Prime Infrastructure. The root cause is insufficient validation of user-supplied input in the interface, allowing an unauthenticated, remote attacker to inject mal...

CVE-2025-3011

SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2024-13804

Unauthenticated RCE in HPE Insight Cluster Management Utility...

Exploit for Stack-based Buffer Overflow in Dlink Dap-1620_Firmware

CVE-2025-2620 Proof-of-Concept Exploit Overview This repos...

CVE-2025-0431

Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of...

CVE-2024-23943

An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical function in the affected devices. Availability is not affected...

CVE-2025-0431

Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of...

CVE-2025-0431

Proofpoint Enterprise Protection contains a vulnerability in URL rewriting where improper filtering of backslashes in URLs can allow an unauthenticated remote attacker to send an email that bypasses URL protections, affecting recipient email integrity. Affected are all 8.21, 8.20, and 8.18 branch...

Proofpoint Enterprise Protection 安全漏洞

Proofpoint Enterprise Protection is an application from Proofpoint USA, Inc. It provides the ability to protect e-mail. A security vulnerability in Proofpoint Enterprise Protection versions prior to 8.21.0 patch 5115, prior to 8.20.6 patch 5114, and prior to 8.18.6 patch 5113, which stems from...

CVE-2024-41975

CVE-2024-41975 concerns the CODESYS Edge Gateway for Windows with insecure defaults. Public sources converge on an unauthenticated remote attacker being able to obtain limited information about the PLC network; however, careful access controls in PLC user management appear to prevent actual contr...

CVE-2024-23943

CVE-2024-23943 affects MB Connect Line mbCONNECT24 devices. The root cause is a lack of authentication for a critical function, enabling unauthenticated remote attackers to access the cloud API. Vulnerable versions are mbCONNECT24 prior to 2.16.2; remediation is upgrading to 2.16.2 or later. Impa...

CVE-2025-1468

CVE-2025-1468 affects CODESYS Control V3 – OPC UA Server. An unauthenticated remote attacker can access sensitive information, including authentication data, when the server uses the non-default Basic128Rsa15 security policy. Impact is information disclosure (CVSS 3.1 base score 7.5; NETWORK, LOW...

CVE-2025-2264

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed...

CVE-2025-2263

Sante PACS Server CVE-2025-2263 is a stack-based buffer overflow in the EVP_DecryptUpdate call during login in Sante PACS Server.exe. It passes a fixed 0x80-byte buffer as the output, allowing an unauthenticated remote attacker to send a long encrypted username/password to overflow the stack, wit...

CVE-2024-28803

Cross-site scripting XSS vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows unauthenticated remote attackers to inject arbitrary web script or HTML into HTTP/POST parameter...

CVE-2025-20145

Cisco IOS XR Software contains an ACL processing issue in the egress direction that can allow an unauthenticated, remote attacker to bypass a configured egress ACL. The root cause involves certain packets being mishandled when received on an ingress interface on one line card and destined to an e...

CVE-2025-20144 Cisco IOS XR Software Access Control List Bypass Vulnerability

A vulnerability in the hybrid access control list ACL processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when a specific configuration of the hybrid ACL exists. ...

Cisco IOS XR Software Access Control List Bypass Vulnerability

A vulnerability in the access control list ACL processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress...