4074 matches found
CVE-2025-20286
A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...
CVE-2025-20286
A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...
CVE-2025-20286
CVE-2025-20286 concerns Cisco Identity Services Engine (ISE) deployed on cloud platforms (AWS, Azure, OCI). The root cause is improper credential generation that causes different ISE deployments using the same credentials when the software release and cloud platform are identical. An unauthentica...
WSO2 API Manager 代码问题漏洞
WSO2 API Manager is a suite of API lifecycle management solutions from US-based WSO2. A security vulnerability exists in WSO2 API Manager that stems from improper validation of user input in the SOAP management service, which could lead to arbitrary file uploads...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
[SECURITY] Fedora 42 Update: python-tornado-6.4.1-3.fc42
Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
CVE-2025-2500
CVE-2025-2500 affects Hitachi Energy Asset Suite SOAP Web services. Public documentation indicates a vulnerability in SOAP-based interfaces that could allow an attacker to gain unauthorized access and potentially extend the window for password attacks. Reported CVSS data (3.1: High, 7.4; 4.0: Cri...
CVE-2025-2500
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
PT-2025-23284 · Unknown · Asset Suite
Name of the Vulnerable Software and Affected Versions: Asset Suite versions affected versions not specified Description: A vulnerability exists in the SOAP Web services, allowing an attacker to gain unauthorized access to the product if successfully exploited. This could also expand the time wind...
CVE-2025-2500: Plaintext Storage of a Password
A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded...
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
Stealer malware no longer just steals passwords. In 2025, it steals live sessions—and attackers are moving faster and more efficiently than ever. While many associate account takeovers with personal services, the real threat is unfolding in the enterprise. Flare’s latest research, The Account and...
CVE-2025-40671
SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘fkremotocentral’ parameter on the ‘/webservices/articles.php’ endpoint...
aws-mcp-server 操作系统命令注入漏洞
aws-mcp-server is a lightweight service by Alexei Ledenev Personal Developer that enables AI assistants to execute AWS CLI commands in a secure containerized environment via the Model Context Protocol MCP. A security vulnerability exists in aws-mcp-server that stems from command injection and cou...
CVE-2025-40671
Gestnet v1.07 by AES Multimedia has an SQL injection vulnerability exposed via the fk_remoto_central parameter on the /webservices/articles.php endpoint. Exploitation could allow an attacker to retrieve, create, update, and delete databases, indicating high impact on confidentiality, integrity, a...
AES Multimedia Gestnet 注入漏洞
AES Multimedia Gestnet is a contracted software from AES Multimedia. An injection vulnerability exists in AES Multimedia Gestnet version v1.07, which stems from an incorrect operation of the parameter fkremotocentral in the file /webservices/articles.php resulting in SQL injection...
CVE-2025-21569
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Web Services. The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2024-52503
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tailored Media Tailored Tools tailored-tools allows Stored XSS.This issue affects Tailored Tools: from n/a through = 1.8.4...