H3C Magic M 安全漏洞

H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M that stems from the use of a default password that could lead to remote execution of arbitrary code...

PT-2025-37335

Name of the Vulnerable Software and Affected Versions: H3C Device versions R365V300R004 Description: An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. Recommendations: Change the default password for H3C Device version R365V300R004...

CVE-2025-57577

CVE-2025-57577 affects H3C Device R365V300R004, where remote attackers could execute arbitrary code via the default password. The issue stems from not changing initial credentials, enabling code execution over the network. Practical impact is high: full system compromise if exploited. Remediation...

PT-2025-37323

Name of the Vulnerable Software and Affected Versions: H3C Magic M Device versions M2V100R006 Description: An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code by using the default password. Recommendations: Change the default password for H3C Magic M Devic...

H3C R365V300R004 安全漏洞

The H3C R365V300R004 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R365V300R004 that stems from the default password not being changed, which could lead to remote execution of arbitrary code...

Palo Alto Networks User-ID Credential Agent 安全漏洞

Palo Alto Networks User-ID Credential Agent is a component of Palo Alto Networks, Inc. that has the capability to collect the correspondence between a user's identity and IP address. A security vulnerability exists in the Palo Alto Networks User-ID Credential Agent that originates from a specific...

CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

CVE-2025-57578

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...

Dell PowerProtect Data Manager Elevation of Privilege Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An elevation of privilege vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which stem...

Cisco Desk/IP/Video Phone Multiple Vulnerabilities (cisco-sa-phone-write-g3kcC5Df)

According to its self-reported version, the remote Cisco Desk, IP or Video Phone running SIP Software is affected by multiple vulnerabilities that could allow an unauthenticated, remote attacker to conduct arbitrary file write and information disclosure attacks. To exploit these vulnerabilities,...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57577

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: the Supplier's position is that their "product lines enforce or clearly prompt users to change any initial credentials upon first use. At most, this would be a case of...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57578

CVE-2025-57578 affects H3C Magic M Device M2V100R006. The vulnerability arises from the use of the default password, enabling a remote attacker to execute arbitrary code over the network with low privileges required and user interaction needed. The available connected documents confirm the affect...

CVE-2025-36222

IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions...

CVE-2025-55049

Use of Default Cryptographic Key CWE-1394...

CVE-2025-55051

CWE-1392: Use of Default Credentials...

kernel: drm/vkms: Fix use after free and double free on init error

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

kernel: drm/vkms: Fix use after free and double free on init error

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

kernel: drm/vkms: Fix use after free and double free on init error

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...