Lucene search
K

31244 matches found

RedhatCVE
RedhatCVE
added 2025/04/26 5:54 a.m.4 views

CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

9.8CVSS7.2AI score0.01255EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.6 views

Cisco Nexus Dashboard Web Detection

Binary data cisconexusdashboardwebdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.7 views

Rockwell Automation FactoryTalk Updater Web Client Detection

Binary data rockwellfactorytalkupdaterwebclientdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.5 views

Rockwell Automation FactoryTalk Updater Authentication Bypass (CVE-2024-10943

Binary data rockwellfactorytalkupdatercve-2024-10943.nbin...

9.1CVSS7.3AI score0.00477EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.31 views

SAP NetWeaver Visual Composer Metadata Uploader Improper Authorization (CVE-2025-31324) (Direct Check)

Binary data sapnetweaverCVE-2025-31324.nbin...

10CVSS7.3AI score0.99359EPSS
Exploits18References4
Tenable Nessus
Tenable Nessus
added 2025/04/24 12:0 a.m.3 views

c-ares Installed (macOS)

Binary data macosc-aresinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/23 12:0 a.m.3 views

Erlang/OTP Installed (Windows)

Binary data ericcsonerlangotpwininstalled.nbin...

7.3AI score
Exploits0References1
Packet Storm News
Packet Storm News
added 2025/04/22 12:0 a.m.3 views

ReGraph: a Tool for Binary Similarity Identification

Binary Code Similarity Detection BCSD is not only essential for security tasks such as vulnerability identification but also for code copying detection, yet it remains challenging due to binary stripping and diverse compilation environments. Existing methods tend to adopt increasingly complex...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/04/22 12:0 a.m.8 views

Qbik WinGate Installed (Windows)

Binary data qbikwingatewininstalled.nbin...

7.3AI score
Exploits0References1
Snyk
Snyk
added 2025/04/21 4:19 p.m.6 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via the RawBinaryReader class. This is due to a missing check of the number of bytes read from the underlying stream while deserializing the binary format when reading binary Ion data. Remediation Upgrade Amazon.IonDotnet ...

8.7CVSS6.8AI score0.00514EPSS
Exploits0References2
NVD
NVD
added 2025/04/21 3:16 p.m.13 views

CVE-2025-29659

Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...

9.8CVSS0.01255EPSS
Exploits1References2
CVE
CVE
added 2025/04/21 3:13 p.m.70 views

CVE-2025-3857

Summary: A vulnerability in Amazon.IonDotnet’s RawBinaryReader can cause an infinite loop when reading binary Ion data if the input is malformed or truncated, due to not checking the number of bytes read from the underlying stream. This could lead to denial of service. Affected versions: Amazon.I...

8.7CVSS7.5AI score0.00514EPSS
Exploits0References3
Kitploit
Kitploit
added 2025/04/21 12:30 p.m.48 views

Bytesrevealer - Online Reverse Enginerring Viewer

Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string extraction, entropy calculation, and file signature detection, it helps users uncover hidden...

7.1AI score
Exploits0References3
Fedora
Fedora
added 2025/04/21 1:41 a.m.15 views

[SECURITY] Fedora 40 Update: uv-0.6.14-3.fc40

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

7AI score
Exploits0
CNNVD
CNNVD
added 2025/04/21 12:0 a.m.2 views

Yi IOT XY-3820 安全漏洞

Yi IOT XY-3820 is a wireless security camera from Yi IOT. A security vulnerability exists in the Yi IOT XY-3820 version 6.0.24.10, which stems from the cmdlisten function in the cmd binary being vulnerable to remote command execution attacks...

9.8CVSS7.1AI score0.01255EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/04/21 12:0 a.m.2 views

PT-2025-17440 · Yi · Yi Iot Xy-3820

Name of the Vulnerable Software and Affected Versions: Yi IOT XY-3820 version 6.0.24.10 Description: The issue concerns a Remote Command Execution vulnerability via the cmd listen function located in the cmd binary. This allows for unauthorized execution of commands, potentially leading to a full...

9.8CVSS6.6AI score0.01255EPSS
Exploits1References14
CVE
CVE
added 2025/04/21 12:0 a.m.62 views

CVE-2025-29659

CVE-2025-29659 affects Yi IOT XY-3820, version 6.0.24.10. The vulnerability is a Remote Command Execution via the cmd_listen function in the cmd binary, with network access and no user interaction required (CVSS v3.1: 9.8, Critical). The reports do not specify a fixed version; a workaround sugges...

9.8CVSS7.4AI score0.01255EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/04/21 12:0 a.m.2 views

ion-dotnet 安全漏洞

ion-dotnet is an A.NET implementation of Amazon Ion by amazon-ion open source. A security vulnerability exists in ion-dotnet versions prior to 1.3.1 that stems from the RawBinaryReader class not checking the number of bytes read, which could lead to an infinite loop and denial of service...

8.7CVSS6.3AI score0.00514EPSS
Exploits0References3
OSV
OSV
added 2025/04/18 6:31 p.m.4 views

GHSA-9G64-R942-FVMP Apache ActiveMQ NMS OpenWire Client Deserialization of Untrusted Data vulnerability

Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client. This issue affects Apache ActiveMQ NMS OpenWire Client before 2.1.1 when performing connections to untrusted servers. Such servers could abuse the unbounded deserialization in the client to provide malicious...

9.8CVSS7.6AI score0.01648EPSS
Exploits0References6
NVD
NVD
added 2025/04/18 4:15 p.m.16 views

CVE-2025-29953

Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client. This issue affects Apache ActiveMQ NMS OpenWire Client before 2.1.1 when performing connections to untrusted servers. Such servers could abuse the unbounded deserialization in the client to provide malicious...

9.8CVSS0.01648EPSS
Exploits0References2
Rows per page
Query Builder