Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/10/18 2:31 a.m.1 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS6.9AI score0.00202EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/17 2:25 a.m.1 views

EUVD-2025-34847

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

9.9CVSS6.3AI score0.0029EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/17 2:25 a.m.1 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS6.6AI score0.00202EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/17 2:25 a.m.6 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS0.00202EPSS
Exploits0References1
CVE
CVE
added 2025/10/17 2:25 a.m.5 views

CVE-2025-6894

CVE-2025-6894 is a documented API authorization flaw in Moxa network security appliances/routers that allows a low-privileged, authenticated user to execute an administrative ping, potentially enabling internal network reconnaissance and limited impact to device confidentiality/availability. Rela...

5.3CVSS6.6AI score0.00202EPSS
Exploits0References1
OSV
OSV
added 2025/02/26 3:15 p.m.1 views

CVE-2025-25794

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...

5.1CVSS6.3AI score0.00329EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.1 views

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a remote code execution RCE issue in the component adminping.php...

5.1CVSS8.1AI score0.00329EPSS
Exploits1References5
CNVD
CNVD
added 2024/07/12 12:0 a.m.6 views

SeaCMS Code Execution Vulnerability (CNVD-2024-33411)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in SeaCMS 12.9 and earlier versions, which stems from the fact that adminping.php directly splices...

9.8CVSS8.1AI score0.02656EPSS
Exploits1References1
OSV
OSV
added 2024/07/05 2:15 p.m.1 views

CVE-2024-39028

An issue was discovered in SeaCMS =12.9 which allows remote attackers to execute arbitrary code via adminping.php...

9.8CVSS6.1AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/05 12:0 a.m.1 views

PT-2024-28337 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions =12.9 Description: An issue in SeaCMS allows remote attackers to execute arbitrary code via the "admin ping.php" endpoint. This enables attackers to run malicious code on the affected system. Recommendations: For SeaCMS versio...

9.8CVSS8.4AI score0.02656EPSS
Exploits1References6
OSV
OSV
added 2024/01/26 9:15 a.m.0 views

CVE-2024-0920

A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /adminping.htm of the component POST Request Handler. The manipulation of the argument ipv4ping/ipv6ping leads to command injection. The attack can be...

7.2CVSS5.6AI score0.00459EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/01/26 12:0 a.m.2 views

PT-2024-1397 · Trendnet · Trendnet Tew-822Dre

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-822DRE version 1.03B02 Description: A critical issue affects the file /admin ping.htm of the component POST Request Handler. The manipulation of the ipv4 ping/ipv6 ping argument leads to command injection. This can be initiated...

8.3CVSS7.6AI score0.00459EPSS
Exploits1References7
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.0 views

CVE-2023-44170

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminping.php...

9.8CVSS5.9AI score0.00362EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.2 views

CVE-2023-43222

SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/adminping.php file...

9.8CVSS7.5AI score0.00298EPSS
Exploits1References2
OSV
OSV
added 2023/09/27 3:19 p.m.0 views

CVE-2023-43222

SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/adminping.php file...

9.8CVSS5.9AI score0.00298EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.1 views

PT-2023-28735 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.8 Description: The issue is related to an arbitrary code writing vulnerability in the /jxz7g2/admin ping.php file. This vulnerability allows for unauthorized code execution. Recommendations: For SeaCMS version 12.8, consider...

9.8CVSS7.3AI score0.00298EPSS
Exploits1References6
Rows per page
Query Builder