Lucene search
+L

4501 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/01 7:21 a.m.12 views

Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection

Overview SkyBridge BASIC MB-A130 provided by Seiko Solutions Inc. contains the following vulnerability. OS command injection CWE-78 - CVE-2025-54857 Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

9.8CVSS8AI score0.03133EPSS
SaveExploits0References4
NVD
NVD
added 2025/09/01 6:15 a.m.12 views

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

9.8CVSS0.03133EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/01 5:27 a.m.7 views

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

9.8CVSS10AI score0.03133EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/01 5:27 a.m.21 views

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

9.8CVSS0.03133EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/01 5:27 a.m.37 views

CVE-2025-54857

CVE-2025-54857 affects SkyBridge BASIC MB-A130 versions prior to 1.5.8 (i.e., 1.5.8 and earlier). The issue is an OS command injection caused by improper neutralization of special elements, allowing a remote unauthenticated attacker to execute arbitrary OS commands with root privileges. The trust...

9.8CVSS7.5AI score0.03133EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.12 views

PT-2025-35457

Name of the Vulnerable Software and Affected Versions SkyBridge BASIC MB-A130 versions prior to 1.5.8 Description Improper neutralization of special elements used in an OS command 'OS Command Injection' exists in the software. If exploited, a remote unauthenticated attacker may execute arbitrary ...

9.8CVSS10AI score0.03133EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.9 views

Seikou202fSolutions SkyBridge BASIC MB-A130 操作系统命令注入漏洞

The Seikou202fSolutions SkyBridge BASIC MB-A130 is a wireless router from Seikou202fSolutions, Japan. An operating system command injection vulnerability exists in Seikou202fSolutions SkyBridge BASIC MB-A130 version 1.5.8 and earlier, which stems from OS command injection and could lead to the...

9.8CVSS9.7AI score0.03133EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-27372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the runinterpreter function. CVE-2020-27372 Note that Nessus relies on the presence...

9.8CVSS7.2AI score0.01448EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/28 12:00 a.m.15 views

Siemens TeleControl Server Basic Database Service Detection

Binary data siemenstelecontrolserverbasicdbservicedetect.nbin...

7.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/28 12:00 a.m.5 views

Siemens TeleControl Server Basic SQLi (CVE-2025-27540)

Binary data siemenstelecontrolserverbasiccve-2025-27540.nbin...

9.8CVSS7.1AI score0.00956EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-19796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file. CVE-2019-19796 Note that Nessus relies on the presenc...

7.8CVSS7.8AI score0.00778EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.17 views

PT-2025-44139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the tty subsystem, specifically in the n gsm component. The issue arises from the potential to block the input queue while waiting for a Modem...

6CVSS5.9AI score0.00187EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-29421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c which allows an attacker to execute arbitrary code. CVE-2024-29421...

6.2CVSS6.4AI score0.00245EPSS
SaveExploits0References2
Huntr
Huntr
added 2025/08/21 9:10 p.m.10 views

Authorization Bypass in MLflow Basic Auth (unprotected Flask/GraphQL routes)

This report is not public...

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2025/08/20 8:03 a.m.15 views

CVE-2025-48160 WordPress Caliris <= 1.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CocoBasic Caliris caliris-wp allows PHP Local File Inclusion.This issue affects Caliris: from n/a through = 1.5...

8.1CVSS0.00519EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/20 12:00 a.m.12 views

Dell PowerEdge Platform 14G AMD BIOS Information Disclosure Vulnerability

Dell PowerEdge Platform 14G AMD BIOS is a BIOS system from Dell USA. The Dell PowerEdge Platform 14G AMD BIOS suffers from an information disclosure vulnerability that originates from end-of-buffer memory location access, which can be exploited by an attacker to gain access to internal system...

3.8CVSS6.5AI score0.00133EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/19 9:38 p.m.11 views

CVE-2025-38584

In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start of the process in padatadoparallel, and released at the end in...

4.7CVSS6.3AI score0.00164EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-8264

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inje...

9.1CVSS5.9AI score0.00391EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/16 2:24 a.m.25 views

CVE-2024-12575

CVE-2024-12575 relates to the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (≤ 5.8.9). The vulnerability is an unauthenticated basic information exposure exposed via the ajax action ays_finish_poll, allowing attackers to retrieve admin email information from poll respon...

5.3CVSS6.7AI score0.00273EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.8 views

Malicious code in qdrant-node-js-basic-example (npm)

The package qdrant-node-js-basic-example was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder