53173 matches found
CVE-2025-54763
FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command...
CVE-2025-54763
FutureNet MA and IP-K series by Century Systems expose an OS command injection flaw (CVE-2025-54763) in the Web UI. JVNDB notes a logged-in user can execute arbitrary OS commands, indicating an unauthenticated or authenticated remote command risk within the product’s web interface. The vulnerabil...
CVE-2025-23050
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read or division by zero. This is fixed in 5.15.19, 6.5.9, and 6.8.2...
PT-2025-44665
Name of the Vulnerable Software and Affected Versions ELOG affected versions not specified Description ELOG allows an authenticated user to modify or overwrite the configuration file, potentially leading to a denial of service. If the execute facility is enabled using the '-x' command line flag,...
EUVD-2025-37272
QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read or division by zero. This is fixed in 5.15.19, 6.5.9, and 6.8.2...
CVE-2025-23050
The CVE-2025-23050 affects QLowEnergyController in Qt before 6.8.2. It arises from mishandling malformed Bluetooth ATT commands, causing an out-of-bounds read or a division-by-zero error. Patches are available in Qt 5.15.19, Qt 6.5.9, and Qt 6.8.2. This has been observed in multiple vulnerability...
ELog 安全漏洞
ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. ELog suffers from a security vulnerability that stems from the ability of an authenticated user to modify or overwrite configuration files, potentially leading to a denial of service. If execution...
PT-2025-44580
Name of the Vulnerable Software and Affected Versions FutureNet MA and IP-K series Description A flaw exists in FutureNet MA and IP-K series routers that allows a user who logs in to the Web UI to execute arbitrary OS commands. This is due to an OS command injection issue. Recommendations At the...
Qt 缓冲区错误漏洞
Qt is a cross-platform application development framework from the Qt open source. A buffer error vulnerability exists in versions prior to Qt 6.8.2 that stems from improper handling of Bluetooth ATT commands, which could result in an out-of-bounds read or divide-by-zero error...
CVE-2025-34284
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...
CVE-2025-34284
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...
CVE-2020-36868
Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retrieval and initialization routines using insecure file/command handling and insufficient validation of attacker-controlled inputs, and in some...
CVE-2023-7317 Nagios XI < 2024R1 Web SSH Terminal Missing Access Control
Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, low-privileged attacker could access or interact with the terminal interface without sufficient authorization, potentially allowing unauthorized command execution or disclosure of...
CVE-2020-36868 Nagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script
Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retrieval and initialization routines using insecure file/command handling and insufficient validation of attacker-controlled inputs, and in some...
CVE-2018-25122 Nagios XI < 5.4.13 Component Download Page RCE
Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The download/import handler used unsafe command construction with attacker-controlled input and lacked sufficient validation and output encoding, allowing an authenticated user to inje...
CVE-2013-10073 Nagios XI < 2012R1.6 Auto-Discovery Shell Command Injection
Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary...
MAL-2025-49096 Malicious code in example-icrc35-shared-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7e6839f13b54dc75f2b851ec1c1e78a9bbf4591f438a2053c99658e5f60189 The package example-icrc35-shared-library was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in create-response (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242fbf21e70f13fac07ad9415ae43d91bc17823a931c07c5143ae7f7119a2b24 The package create-response was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-49095 Malicious code in create-response (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242fbf21e70f13fac07ad9415ae43d91bc17823a931c07c5143ae7f7119a2b24 The package create-response was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in int_affirm_controllers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c121a8e42740e77bf8fbd68555baf163e58d04b145e5ad42bbc0feb3a087628 The package intaffirmcontrollers was found to contain malicious code. Source: ossf-package-analysis...