8275 matches found
[SECURITY] Fedora 43 Update: xen-4.20.1-8.fc43
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
CVE-2025-4106
An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command. This issue affects Fireware OS: from 12.0...
[SECURITY] Fedora 42 Update: python-sqlparse-0.4.2-14.fc42
sqlparse is a tool for parsing SQL strings. It can generate pretty-printed renderings of SQL in various formats. It is a python module, together with a command-line tool...
PT-2025-43926
Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description An attacker manipulating the C++ CLI client can cause the UpdateService to crash during file transfers, leading to disruptions in updates and availability. Recommendations At the moment, there is no informati...
Siemens SIMATIC Devices Classic Buffer Overflow (CVE-2024-26988)
In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential staticcommandline memory overflow This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
[SECURITY] Fedora 43 Update: docker-buildx-0.29.1-1.fc43
Docker CLI plugin for extended build capabilities with BuildKit...
EUVD-2025-35898
An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command. This issue affects Fireware OS: from 12.0...
Fedora 43 : complyctl (2025-b527f8a1ee)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b527f8a1ee advisory. First minor release of complyctl - a new command line Interface for Fedora compliance assessment. It features a decoupled plug-in architecture for flexibilit...
CVE-2025-4106
An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command...
CVE-2025-4106
CVE-2025-4106 is a vulnerability in WatchGuard Fireware OS where an authenticated admin who has access to both the WebUI and the CLI can enable a diagnostic debug shell by uploading a platform/version-specific diagnostic package and executing a leftover diagnostic command. Affected versions are F...
EUVD-2025-35769
Malicious code in mender-cli npm...
PT-2025-43675
Name of the Vulnerable Software and Affected Versions Fireware OS versions prior to 12.11.2 Description An authenticated administrator user with access to both the management WebUI and command line interface on a Firebox device can enable a diagnostic debug shell. This is achieved by uploading a...
GO-2025-3984 Rancher CLI SAML authentication is vulnerable to phishing attacks in github.com/rancher/rancher
Rancher CLI SAML authentication is vulnerable to phishing attacks in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabili...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
Zyxel ATP series firmware和Zyxel USG FLEX series firmware 操作系统命令注入漏洞
Zyxel ATP series firmware and Zyxel USG FLEX series firmware are both products of the Chinese company Zyxel.Zyxel ATP series firmware is a series of firewall firmware.Zyxel USG FLEX series firmware is a series of Zyxel ATP series firmware is a series of firewall firmware. The Zyxel ATP series...
pocFlexiPwn
It is an offensive tool for web exploitation. The repository con...