306 matches found
CVE-2025-41734: Improper Control of Filename for Include/Require Statement in PHP Program
An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices...
CVE-2025-13284: Improper Neutralization of Special Elements used in an OS Command
ThinPLUS developed by ThinPLUS has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2025-13160: Exposure of Sensitive System Information to an Unauthorized Control Sphere
IQ-Support developed by IQ Service International has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to access specific APIs to obtain sensitive information from the internal network...
CVE-2025-60702: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the system.so binary. The setDiagnosisCfg function retrieves the ipDoamin parameter from user input via websGetVar and concatenates it directly into a ping system command executed via...
CVE-2025-40816: Missing Authentication for Critical Function
A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions, LOGO! 24CE 6ED1052-1CC08-0BA2 All versions, LOGO! 24CEo...
CVE-2025-40744: Improper Certificate Validation
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...
CVE-2025-58429: Relative Path Traversal
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine...
CVE-2025-57870: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL commands via a specific ArcGIS Feature Service operation. Successful exploitation can...
CVE-2025-60344: Path Traversal: '../filedir'
A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...
CVE-2025-11898: Relative Path Traversal
Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...
CVE-2025-59268: Insertion of Sensitive Information Into Sent Data
On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-40765: Missing Authentication for Critical Function
A vulnerability has been identified in TeleControl Server Basic V3.1 All versions = V3.1.2.2 V3.1.2.3. The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform...
CVE-2025-41703: Missing Authentication for Critical Function
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command...
EUVD-2017-0661
Malware in sbrugna...
EUVD-2018-0511
Malware in sbrugna...
EUVD-2007-3710
Malware in sbrugna...
EUVD-2021-19726
Malware in sbrugna...
EUVD-2017-15222
Malware in sbrugna...