CVE-2026-65184 Avocent ACS8000 wsserver command injection

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

CVE-2026-65184

The Avocent ACS8000 is vulnerable to an OS command injection flaw in its root-privileged wsserver terminal-bridge daemon. The daemon constructs shell commands using client-supplied WebSocket fields and passes them to system() and popen() functions without proper quoting, escaping, or character-se...

CVE-2026-65184 Avocent ACS8000 wsserver command injection

The root-privileged wsserver terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to system and popen without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check...

PT-2026-123356

Name of the Vulnerable Software and Affected Versions Avocent ACS8000 versions prior to 2.32.4 Description The root-privileged wsserver terminal-bridge daemon allows a connected client to execute arbitrary commands on the appliance as root. This occurs because the daemon constructs a shell comman...

CVE-2024-34923

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting XSS...

EUVD-2005-2984

Malware in sbrugna...

EUVD-2019-18883

Malware in sbrugna...

EUVD-2013-5860

Malware in sbrugna...

EUVD-2013-0537

Malware in sbrugna...

EUVD-2024-35158

Malicious code in bioql PyPI...

Avocent DSR2030 SVIP1020 XSS

The vulnerability of the microprogramming software for Avocent DSR2030 and Avocent SVIP1020 exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

CVE-2024-34923

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting XSS...

CVE-2024-34923

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting XSS...

CVE-2024-34923

The Avocent DSR2030 and SVIP1020 appliances are vulnerable to reflected cross-site scripting (XSS) due to inadequate protection of the web page structure. This flaw allows a remote attacker to execute malicious scripts in a user's browser. Affected products include Avocent DSR2030 firmware versio...

CVE-2024-34923

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting XSS...

CVE-2024-34923: Improper Neutralization of Input During Web Page Generation

In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting XSS...

Avocent DSR2030 security vulnerabilities

The Avocent DSR2030 is a 16-port KVM over IP switch from Avocent designed to manage multiple servers and serial devices in a data center. A security vulnerability exists in the Avocent DSR2030 versions prior to 03.07.01.23 and SVIP1020 versions prior to 01.07.00.00, which stems from vulnerability...

PT-2022-7367 · Avocent · Avocent Svip1020 +1

Name of the Vulnerable Software and Affected Versions: Avocent DSR2030 versions 03.04.00.07 through 03.07.01.22 Avocent SVIP1020 versions 01.06.00.03 through 01.06.00.03 Description: The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct a...

Vertiv Avocent UMG-4000 Web Interface Cross-Site Scripting Vulnerability

The Vertiv Avocent UMG-4000 is a Universal Management Gateway appliance from Vertiv Technologies Vertiv. It supports real-time management, monitoring, access and control of IT devices and infrastructure. A cross-site scripting vulnerability exists in the HTTP POST parameter of the web interface i...

Vertiv Avocent UMG-4000 Web Interface Cross-Site Scripting Vulnerability (CNVD-2020-25873)

The Vertiv Avocent UMG-4000 is a Universal Management Gateway appliance from Vertiv Technologies Vertiv. It supports real-time management, monitoring, access and control of IT devices and infrastructure. A cross-site scripting vulnerability exists in the web interface of the Vertiv Avocent UMG-40...