Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2025/03/29 4:25 p.m.•45 views

CVE-2025-2855

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

7.2CVSS4.8AI score0.00554EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/27 4:15 p.m.•31 views

CVE-2025-2855

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

7.2CVSS0.00554EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/03/27 3:31 p.m.•19 views

CVE-2025-2855 elunez eladmin upload checkFile deserialization

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

5.8CVSS4.9AI score0.00554EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/03/27 3:31 p.m.•23 views

CVE-2025-2855 elunez eladmin upload checkFile deserialization

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

5.1CVSS5.3AI score
SaveExploits0References6
CVE
CVE
•added 2025/03/27 3:31 p.m.•135 views

CVE-2025-2855

The CVE-2025-2855 entry affects elunez eladmin up to 2.7. The vulnerability is due to the function checkFile in /api/deploy/upload, where manipulation of the argument servers leads to deserialization. The attack may be launched remotely. The issue is documented across multiple sources as a deseri...

7.2CVSS4.9AI score0.00554EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/03/27 3:31 p.m.•53 views

CVE-2025-2855 elunez eladmin upload checkFile deserialization

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

5.8CVSS0.00554EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/27 3:31 p.m.•9 views

CVE-2025-2855

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

7.2CVSS4.9AI score0.00554EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•7 views

CVE-2025-2855: Deserialization of Untrusted Data

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attack may be launched remotely...

7.2CVSS4.9AI score0.00554EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•8 views

PT-2025-13277

Name of the Vulnerable Software and Affected Versions elunez eladmin versions up to 2.7 Description A problematic issue has been found, affecting the function checkFile of the file "/api/deploy/upload". The manipulation of the argument servers leads to deserialization. This issue can be exploited...

7.2CVSS4.9AI score0.00554EPSS
SaveExploits1References8
CNVD
CNVD
•added 2022/05/19 12:00 a.m.•62 views

Fidelis Network Deception Command Injection Vulnerability (CNVD-2022-59166)

Fidelis Network Deception is a security product from Fidelis USA, Inc. A command injection vulnerability exists in versions prior to Fidelis Network Deception 9.4.5, which stems from the filename parameter of CommandPost when using the updatecheckfile value. Command injection exists, and an...

9CVSS2.2AI score0.02572EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/05/16 3:30 p.m.•10 views

CVE-2022-24394

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “updatecheckfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost...

9CVSS7.4AI score0.02572EPSS
SaveExploits0References2
Rows per page
Query Builder