4518 matches found
CVE-2025-37133
CVE-2025-37133 affects ArubaOS AOS-8 Controller/Mobility Conductor CLI binary. An authenticated attacker could inject commands with privileged execution rights. The Nessus plugin ARUBAOS-HPESBNW04957 notes multiple vulnerabilities including this CVE, and lists affected ArubaOS versions prior to c...
CVE-2025-37146 Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution
A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2025-37146 Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution
A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2025-41699
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code 'Code Injection'...
CVE-2025-41699 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code 'Code Injection'...
CVE-2025-41699 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code 'Code Injection'...
EUVD-2025-34144
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code 'Code Injection'...
PT-2025-41859
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists in a web-based management interface that allows a low-privileged remote attacker with an account to execute arbitrary commands with root privilege...
PT-2025-41976
Name of the Vulnerable Software and Affected Versions AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description An arbitrary file write issue exists in the web-based management interface. Successful exploitation could allow an...
Hewlett Packard Enterprise ArubaOS 安全漏洞
Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS HPE ArubaOS that stems from an arbitrary file download vulnerability in the web-based management...
PT-2025-41987
Name of the Vulnerable Software and Affected Versions AOS-10 GW and AOS-8 Controller/Mobility Conductor affected versions not specified Description An arbitrary file download issue exists in the web-based management interface. Exploitation of this issue could allow an authenticated malicious acto...
EUVD-2025-32713
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...
CVE-2025-3718
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...
EUVD-2020-24549
Malware in sbrugna...
EUVD-2021-14884
Malware in sbrugna...
EUVD-2019-10515
Malware in sbrugna...
EUVD-2017-3877
Malware in sbrugna...
EUVD-2017-12962
Malware in sbrugna...