The vulnerability in the web interface of the Cisco Application Policy Infrastructure Controller allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

TOTOLINK N300RH 注入漏洞

TOTOLINK N300RH is a long range wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N300RH suffers from a command injection vulnerability that stems from the parameter FileName in the file /cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters,...

The vulnerability in the web interface for managing Tenda FH1202 micro-programmed software routers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface for managing Tenda FH1202 micro-program software routers is related to deficiencies in access control when processing the /goform/wrlwpsset endpoint. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

CVE-2025-0137

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...

The vulnerability of the Zabbix universal monitoring system’s web interface allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Zabbix universal monitoring system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by manipulating the backurl parameter...

CVE-2025-33025

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.5, RUGGEDCOM ROX MX5000RE All versions V2.16.5, RUGGEDCOM ROX RX1400 All versions V2.16.5, RUGGEDCOM ROX RX1500 All versions V2.16.5, RUGGEDCOM ROX RX1501 All versions V2.16.5, RUGGEDCOM ROX RX1510 All versions V2.16.5...

CVE-2025-0137

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...

CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue...

CVE-2025-0138

CVE-2025-0138 affects Palo Alto Networks Prisma Cloud Compute Edition. Web sessions in the Compute Edition web interface do not expire when users are deleted, allowing potential unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected. CVSS-like metrics indicate low overall...

CVE-2025-0137

CVE-2025-0137 affects Palo Alto Networks PAN-OS management web interface. The vulnerability is an improper input neutralization that allows a malicious authenticated read/write PAN-OS administrator to impersonate another legitimate PAN-OS administrator. Affected versions identified in connected s...

CVE-2025-0137 PAN-OS: Improper Neutralization of Input in the Management Web Interface

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...

CVE-2025-0137 PAN-OS: Improper Neutralization of Input in the Management Web Interface

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...

PYSEC-2025-39

motionEye is an online interface for the software motion, a video surveillance program with motion detection. In versions 0.43.1b1 through 0.43.1b3, using a constructed camera device path with the add/addcamera motionEye web API allows an attacker with motionEye admin user credentials to execute...

I checked out the European vulnerability database, EUVD, which was officially launched yesterday

I checked out the European vulnerability database,EUVD, which was officiallylaunchedyesterday. Its usefulness is questionable for now. !🤷‍♂️https://s.w.org/images/core/emoji/15.1.0/72x72/1f937-200d-264...

PT-2025-21213 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: An improper input neutralization issue in the management web interface of the Palo Alto Networks PAN-OS software allows a malicious authenticated read-write administrator to impersonate...

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h14 / 10.2.x < 10.2.13 / 11.1.x < 11.1.8 / 11.2.x < 11.2.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h14, 10.2.x prior to 10.2.13, 11.1.x prior to 11.1.8, or 11.2.x prior to 11.2.5. It is, therefore, affected by a vulnerability. An improper input neutralization vulnerability in the management web...

PT-2025-20861 · Siemens +1 · Ruggedcom Rox Mx5000 +9

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.5 RUGGEDCOM ROX MX5000RE versions prior to V2.16.5 RUGGEDCOM ROX RX1400 versions prior to V2.16.5 RUGGEDCOM ROX RX1500 versions prior to V2.16.5 RUGGEDCOM ROX RX1501 versions prior to V2.16.5...

PT-2025-29477 · Ооо 'Кьютэк' · Qsw-2800-10T-Ac +3

Уязвимость веб-интерфейса коммутаторов Qtech, связанная с некорректной обработкой файлов cookie. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, повысить свои привилегии до уровня администратора...

Multiple vulnerabilities in GL-MT2500 and GL-MT2500A

Overview GL-MT2500 and GL-MT2500A provided by GL.iNet contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2024-57391 Inefficient regular expression complexity CWE-1333 - CVE-2025-2811 Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported these vulnerabilities to...

ZONG YU Parking Management System 访问控制错误漏洞

ZONG YU Parking Management System is a comprehensive intelligent parking management platform from ZONG YU. An access control error vulnerability exists in the ZONG YU Parking Management System, which stems from a lack of authentication in the web management interface, which could allow an...