CVE-2025-2172

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames...

CVE-2025-2172

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames...

CVE-2025-2172

Aviatrix Controller is affected in versions prior to 7.1.4208, 7.2.5090, and 8.0.0 due to insufficient input sanitization before passing data to command line utilities, enabling command injection via special characters in filenames. The issue is documented with fixed releases: upgrade to 7.1.4208...

CVE-2025-2171

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit password reset PIN...

CVE-2025-2171

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit password reset PIN...

CVE-2025-2171

CVE-2025-2171 affects Aviatrix Controller. The issue is a failure to enforce rate limiting on password reset attempts, allowing brute‑force guessing of the 6‑digit reset PIN. Affected versions are Aviatrix Controller before 7.1.4208, 7.2.5090, and 8.0.0. Public sources in the connected documents ...

CVE-2025-49973

Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes image-sizes-controller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Sizes Controller, Create Custom Image Sizes, Disable...

CVE-2025-25037

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions = 5.1.6 and web interface versions = 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration...

Spring-Analysis 代码注入漏洞

Spring-Analysis is a Spring source code reading note by skywalker individual developer. Spring-Analysis has a code injection vulnerability that stems from cross-site scripting due to improper handling of the Name parameter in the SimpleController.java file...

Convoy 安全漏洞

Convoy is Convoy Open Source a modern platform tailored for hosting providers and enthusiasts. A security vulnerability exists in Convoy versions prior to 4.4.1 that stems from a directory traversal vulnerability in the LocaleController component...

PT-2025-26596 · Aviatrix · Aviatrix Controller

Name of the Vulnerable Software and Affected Versions: Aviatrix Controller versions prior to 7.1.4208 Aviatrix Controller versions prior to 7.2.5090 Aviatrix Controller versions prior to 8.0.0 Description: The issue concerns the lack of rate limiting on password reset attempts in Aviatrix...

Vulnerability of the peakpciRemove() function in the drivers/net/can/sja1000/peakpci.c module – A Linux kernel CAN device driver support mechanism that allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the peakpciRemove function in the drivers/net/can/sja1000/peakpci.c module – The Linux kernel’s CAN network device driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2025-26597 · Aviatrix · Aviatrix Controller

Name of the Vulnerable Software and Affected Versions: Aviatrix Controller versions prior to 7.1.4208 Aviatrix Controller versions prior to 7.2.5090 Aviatrix Controller versions prior to 8.0.0 Description: The issue is related to the failure of the Aviatrix Controller to sanitize user input befor...

Aviatrix Controller 安全漏洞

Aviatrix Controller is a software application from the American company Aviatrix. Extend and control the native structure with the cloud provider's APIs to extend its functionality and integrate it into the software. A security vulnerability exists in Aviatrix Controller versions prior to 7.1.420...

Aviatrix Controller 安全漏洞

Aviatrix Controller is a software application from the American company Aviatrix. Extend and control the native structure with the cloud provider's APIs to extend its functionality and integrate it into the software. A security vulnerability exists in Aviatrix Controller versions prior to 7.1.420...

PT-2025-36305

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the media subsystem, specifically within the Intel Video Subsystem Controller IVSC driver. Missing mei cldev disable calls in the ACE and CSI...

CVE-2025-25037

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions = 5.1.6 and web interface versions = 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration...

CVE-2025-25037 Aquatronica Controller System Complete Information Disclosure

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions = 5.1.6 and web interface versions = 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration...

CVE-2025-25037 Aquatronica Controller System Complete Information Disclosure

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions = 5.1.6 and web interface versions = 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration...

CVE-2025-25037

CVE-2025-25037 affects Aquatronica Controller System firmware versions ≤ 5.1.6 and web interface ≤ 2.0. The issue arises from unauthenticated access to the tcp.php endpoint, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration data, including plaintext adm...