Lucene search
+L

178 matches found

Kitploit
Kitploit
•added 2026/10/04 10:39 a.m.•95 views

backdoor.mirai.helloworld

Al agregar una cadena después de '? image' en la URL del router Dasan GPON...

5.9AI score
SaveExploits0
Nuclei
Nuclei
•added 2026/09/11 5:22 a.m.•101 views

Dasan GPON Devices - Remote Code Execution

Dasan GPON home routers are susceptible to command injection which can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

9.8CVSS8.5AI score0.99949EPSS
SaveExploits9References5
RedhatCVE
RedhatCVE
•added 2025/11/20 12:21 a.m.•21 views

CVE-2025-63206

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

9.8CVSS7.5AI score0.00533EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/19 6:15 p.m.•19 views

CVE-2025-63206

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

9.8CVSS0.00533EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/19 6:15 p.m.•22 views

CVE-2025-63206

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

9.8CVSS5.8AI score0.00533EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/19 12:00 a.m.•28 views

CVE-2025-63206

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

0.00533EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/19 12:00 a.m.•22 views

PT-2025-47493

Name of the Vulnerable Software and Affected Versions Dasan Switch DS2924 versions 1.01.18 and 1.02.00 Description An authentication bypass exists in the web based interface of Dasan Switch DS2924. Successful exploitation allows attackers to gain escalated privileges by storing specially crafted...

6.9AI score0.00533EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/11/19 12:00 a.m.•6 views

CVE-2025-63206

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

5.8AI score0.00533EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/19 12:00 a.m.•30 views

CVE-2025-63206

The Dasan Switch DS2924 Ethernet switch is susceptible to an authentication bypass vulnerability in its web-based interface. Specifically, firmware versions 1.01.18 and 1.02.00 allow attackers to gain elevated privileges by storing specially crafted cookies in the web browser. To mitigate this ri...

9.8CVSS5.8AI score0.00533EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•1 views

CVE-2025-63206: Missing Authentication for Critical Function

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...

9.8CVSS5.8AI score0.00533EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/19 12:00 a.m.•19 views

Dasan Switch DS2924 安全漏洞

The Dasan Switch DS2924 is an Ethernet switch from Dasan Korea. A security vulnerability exists in the Dasan Switch DS2924 version 1.01.18 and 1.02.00, which stems from an authentication bypass that could lead to elevated privileges...

9.8CVSS7AI score0.00533EPSS
SaveExploits1References3
The Hacker News
The Hacker News
•added 2025/10/13 10:12 a.m.•13 views

Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors

Malware campaigns distributing the RondoDox botnet have expanded their targeting focus to exploit more than 50 vulnerabilities across over 30 vendors. The activity, described as akin to an "exploit shotgun" approach, has singled out a wide range of internet-exposed infrastructure, including...

8.8CVSS7.6AI score0.99999EPSS
SaveExploits7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2018-9609

Malware in sbrugna...

9CVSS7.2AI score0.03799EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-19328

Malware in sbrugna...

9.1CVSS8.1AI score0.02924EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-18337

Malware in sbrugna...

10CVSS9.5AI score0.02857EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-19329

Malware in sbrugna...

7.5CVSS7.4AI score0.01328EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2018-9610

Malware in sbrugna...

4.8CVSS5.7AI score0.00534EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2018-9611

Malware in sbrugna...

8.8CVSS7.8AI score0.00465EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-19330

Malware in sbrugna...

8.8CVSS7.8AI score0.01007EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-46935

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01465EPSS
SaveExploits0References1
Rows per page
Query Builder