Lucene search
+L

49405 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/23 12:00 a.m.8 views

Security Updates for Microsoft Word Products C2R (October 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instead...

7.8CVSS8.9AI score0.00466EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/23 12:00 a.m.33 views

CVE-2025-54964

A vulnerability exists in BAE SOCET GXP versions prior to 4.6.0.2 involving the GXP Job Service . An attacker capable of interacting with this service can inject arbitrary executables . The impact depends on the service configuration: if configured for local-only access, it may lead to privilege ...

7.3AI score0.00311EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/10/22 4:15 a.m.18 views

CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

8.3CVSS0.19085EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/22 1:12 a.m.17 views

CVE-2025-6542

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

9.8CVSS7.3AI score0.01006EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/22 1:12 a.m.17 views

CVE-2025-6541

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

8.8CVSS7.1AI score0.0068EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/10/22 12:00 a.m.8 views

VulnCheck KEV: CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

8.3CVSS6AI score0.19085EPSS
SaveIn wildExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2025/10/22 12:00 a.m.33 views

VulnCheck KEV: CVE-2016-15048

AMTT Hotel Broadband Operation System HiBOS contains an unauthenticated command injection vulnerability in the /manager/radius/serverping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An...

10CVSS6.1AI score0.07357EPSS
SaveIn wildExploits2References3
CVE
CVE
added 2025/10/22 12:00 a.m.51 views

CVE-2024-58274

CVE-2024-58274 affects Hikvision CSMP iSecure Center (through 2024-08-01). Affected component is the JSON data handling in /center/api/installation/detection, where unverified use of the $() command can lead to arbitrary command execution. Documents indicate exploitation in the wild during 2024 a...

8.3CVSS6.8AI score0.19085EPSS
SaveIn wildExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2025/10/22 12:00 a.m.24 views

VulnCheck KEV: CVE-2025-6264

Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated permissions. To limit access to some dangerous artifact, Velociraptor allows for those to require high permissions like EXECVE to launch...

5.5CVSS7.4AI score0.0103EPSS
SaveIn wildExploits2References9
Cvelist
Cvelist
added 2025/10/22 12:00 a.m.429 views

CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

8.3CVSS0.19085EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/22 12:00 a.m.15 views

EUVD-2024-55040

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

8.3CVSS6.7AI score0.19085EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/10/22 12:00 a.m.13 views

The vulnerability of TP-Link Omada network gateways’ microprogramming software lies in the lack of measures to neutralize specific elements, allowing attackers to execute arbitrary commands on the operating system.

The vulnerability of TP-Link Omada network gateways’ microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...

10CVSS6.4AI score0.01006EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/22 12:00 a.m.11 views

CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

8.3CVSS6.8AI score0.19085EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/21 10:02 p.m.9 views

Malicious code in test-all1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9b13c552c50461f4b3a7a423bf9fc79e3a5ea1c36d107ecd7536223789616aa The OpenSSF Package Analysis project identified 'test-all1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
CVE
CVE
added 2025/10/21 12:28 a.m.37 views

CVE-2025-7850

CVE-2025-7850 is an authenticated OS command injection affecting TP-Link Omada gateway devices. The TP-Link/THN coverage describes exploitation via the WireGuard VPN settings where improper sanitization enables arbitrary OS commands (root) after admin authentication, with two other Omada flaws pa...

9.3CVSS7.4AI score0.03281EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/21 12:23 a.m.6 views

CVE-2025-6542 OS command injection in multiple parameters

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

9.3CVSS7AI score0.01006EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/21 12:21 a.m.48 views

CVE-2025-6541

CVE-2025-6541 affects TP-Link Omada gateway devices. The flaw allows command injection in the device OS via the web management interface, exploitable by an authenticated user to run arbitrary commands. Impact is high per CVSS. TP-Link issued firmware updates addressing this and similar flaws; use...

8.8CVSS6.7AI score0.0068EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2025/10/21 12:21 a.m.13 views

EUVD-2025-35118

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

8.6CVSS6.6AI score0.0068EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/21 12:00 a.m.18 views

ZOHO ManageEngine ADManager Plus 安全漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

8.8CVSS7.7AI score0.04542EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/21 12:00 a.m.58 views

ZenML Input Validation Error Vulnerability

ZenML is an extensible open source MLOps framework from ZenML Open Source for creating portable, production-ready machine learning pipelines. An input validation error vulnerability exists in ZenML version 0.83.1, which stems from the failure of the PathMaterializer class to effectively detect...

7.8CVSS7.4AI score0.00365EPSS
SaveExploits1References1
Rows per page
Query Builder