Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/02/07 9:47 a.m.•15 views

CVE-2025-0364

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

9.8CVSS8.5AI score0.0193EPSS
SaveExploits2References1
OSV
OSV
•added 2025/02/04 6:15 p.m.•13 views

CVE-2025-0364

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

9.8CVSS6.5AI score0.0193EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/02/04 5:51 p.m.•28 views

CVE-2025-0364 BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

9.8CVSS0.0193EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•11 views

PT-2025-3851

Name of the Vulnerable Software and Affected Versions BigAntSoft BigAnt Server versions up to and including 5.6.06 Description The issue concerns unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the defaul...

9.8CVSS9.4AI score0.0193EPSS
SaveExploits2References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•1 views

CVE-2025-0364: Authentication Bypass Using an Alternate Path or Channel

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...

9.8CVSS6.7AI score0.0193EPSS
SaveExploits2References1
Rows per page
Query Builder