CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

D-Link R15 安全漏洞

D-Link R15 is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link R15 that originates from the incorrect operation of the model name parameter during a password change request in the web administrator page, which could lead to command injection...

CVE-2025-11565

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST /REST/UpdateJRE request payload...

EUVD-2001-0829

Malware in sbrugna...

EUVD-2008-0574

Malware in sbrugna...

EUVD-2017-3747

Malware in sbrugna...

EUVD-2025-25834

Malicious code in bioql PyPI...

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

CVE-2025-0415: Improper Neutralization of Special Elements used in an OS Command

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

CVE-2021-25267

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...

Weak password vulnerability in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co.

Beijing Tianrongxin Technology Co., Ltd. is a leading provider of network security, big data and cloud services in China. A weak password vulnerability exists in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Google Android Remote Code Execution Vulnerability (CNVD-2020-04546)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in Google Android. An attacker can exploit the vulnerability to obtain URL administrator privileges...

SonicOS Elevation of Privilege Vulnerability

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. An authorization issue vulnerability exists in SonicWall SonicOS. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a network...

sysstat resource management error vulnerability

sysstat is a set of system performance monitoring tools for the Linux platform. A resource management error vulnerability exists in the 'checkfileactlst' function of the sacommon.c file in sysstat 12.2.0 and earlier versions. The vulnerability stems from mismanagement of system resources e.g.,...

Bento4 Post-Release Reuse Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in the 'AP4Sample::GetOffset' function of the Core/Ap4Sample.h file in Bento4 version 1.5.1.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

MetInfo suffers from a file upload vulnerability (CNVD-2020-01603)

MetInfo is a professional enterprise-level CMS building system. A file upload vulnerability exists in MetInfo, which can be exploited by attackers to gain web administrator privileges...

Juniper Networks Junos OS Authorization Issues Vulnerability (CNVD-2019-41474)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An authorization issue vulnerability exists in Juniper Networks Junos OS. The vulnerability stems from a lack of...

Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2019-15676)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange GmbH OX App Suite versions 7.8.3 and earlier. The...

Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2019-15677)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange OX App Suite 7.8.3 and prior versions. The vulnerabilit...