6386 matches found
CVE-2025-41705
An unauthenticated remote attacker MITM can intercept the websocket messages to gain access to the login credentials for the Webfrontend...
CVE-2025-41707 Phoenix Contact: WebSocket Handler Denial of Service
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality...
CVE-2025-41707
The CVE-2025-41707 entry is associated with Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP and related QUINT4-series hardware. Multiple connected sources describe a denial-of-service vulnerability in the WebSocket handler that allows an unauthenticated remote attacker to trigger the issue by sending...
EUVD-2025-34147
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality...
CVE-2025-41707 Phoenix Contact: WebSocket Handler Denial of Service
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality...
CVE-2025-41705
CVE-2025-41705 is reported as an unauthenticated MITM issue where an attacker can intercept websocket messages to obtain login credentials from the Webfrontend. Connected sources identify Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP as the affected device family, with the vulnerability described a...
CVE-2025-41705 Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
An unauthenticated remote attacker MITM can intercept the websocket messages to gain access to the login credentials for the Webfrontend...
CVE-2025-41705 Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
An unauthenticated remote attacker MITM can intercept the websocket messages to gain access to the login credentials for the Webfrontend...
EUVD-2025-34146
An unauthenticated remote attacker MITM can intercept the websocket messages to gain access to the login credentials for the Webfrontend...
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP 安全漏洞
The Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP is an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP that originates from an unauthenticated, remote attacker who can obtain...
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP 安全漏洞
The Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP is an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP that stems from a denial-of-service vulnerability in the websocket handle...
PT-2025-41857
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description The websocket handler is susceptible to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger this issue. The core functionality is not...
PT-2025-41855
Name of the Vulnerable Software and Affected Versions Webfrontend affected versions not specified Description An unauthenticated remote attacker performing a man-in-the-middle MITM attack can intercept websocket messages. This interception allows access to login credentials for the Webfrontend. T...
Linux Distros Unpatched Vulnerability : CVE-2025-54289
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions a...
Linux Distros Unpatched Vulnerability : CVE-2025-11234
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callba...
Qemu-kvm: vnc websocket handshake use-after-free
...
EUVD-2015-8479
Malware in sbrugna...
EUVD-2018-1956
Malware in sbrugna...