152 matches found
CVE-2025-23169
The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input provided for these customizations is not properly validated or sanitized, allowing a malicious user to inject and store cross-site scripting XSS...
CVE-2025-23170
The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The underlying Python script, shell-connect.py, is vulnerable to command injection through the user argument. This allows an attacker to execu...
CVE-2024-39717
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. Tenant level users do not have this privilege. The “Change Favicon” Favorite Icon...
EUVD-2021-25647
Malware in sbrugna...
EUVD-2018-8307
Malware in sbrugna...
EUVD-2019-11479
Malware in sbrugna...
EUVD-2018-8309
Malware in sbrugna...
EUVD-2024-38202
Malicious code in bioql PyPI...
EUVD-2025-18673
Malicious code in bioql PyPI...
EUVD-2024-54691
Malicious code in bioql PyPI...
EUVD-2025-18666
Malicious code in bioql PyPI...
EUVD-2025-18672
Malicious code in bioql PyPI...
The vulnerability of the NCS software platform for managing network infrastructure, Versa Director, allows a hacker to execute arbitrary code.
The vulnerability of the NCS software platform for managing network infrastructure, Versa Director, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Versa Director software platform for managing network infrastructure lies in its ability to download files of a malicious nature without limitation. This allows attackers to upload any type of files they desire.
The vulnerability of the Versa Director network infrastructure management software platform is related to the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows an attacker operating remotely to download arbitrary files...
The vulnerability of the Versa Director software platform for managing network infrastructure lies in the lack of protective measures for the website structure, allowing attackers to carry out XSS attacks.
The vulnerability of the Versa Director network infrastructure management software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...
The vulnerability of the Versa Director network infrastructure management software lies in the lack of measures to neutralize special elements in the output data. This allows attackers to bypass existing security restrictions and load arbitrary files.
The vulnerability of the Versa Director network infrastructure management software platform is related to the failure to take measures to neutralize specific elements in the output data. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions and load...
The vulnerability of the Versa Director network infrastructure management software lies in its ability to bypass authentication through spoofing. This allows attackers to redirect OTP password transmissions and gain unauthorized access to the system.
The vulnerability of the Versa Director network infrastructure management software platform is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to redirect OTP password transmissions and gain unauthorized access to the system...
The vulnerabilities of the “Add Webhook” and “Test Webhook” functions of the Webhook Feature component of the Versa Director software platform allow attackers to execute arbitrary commands, increase their privileges, or run arbitrary code.
The vulnerability of the “Add Webhook” and “Test Webhook” functions of the Webhook Feature component in the software platform for managing network infrastructure, Versa Director, is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious acto...
The vulnerability of the shell-connect.py file on the software platform for managing network infrastructure, Versa Director, allows a hacker to execute arbitrary commands.
The vulnerability of the shell-connect.py file on the software platform for managing network infrastructure, Versa Director, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands through the...
CVE-2025-24291
The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the Java code handling file uploads contains an argument injection vulnerability. By appending additional arguments to the file name, an attacker can bypass MIME type validation,...