Lucene search
+L

89 matches found

OSV
OSV
added 2026/01/12 11:02 p.m.17 views

CVE-2026-22212 TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

4.8CVSS6.3AI score
SaveExploits0References5
CVE
CVE
added 2026/01/12 11:02 p.m.41 views

CVE-2026-22212

CVE-2026-22212 concerns TinyOS up to 2.1.2, where the mcp2200gpio utility is vulnerable to a stack-based buffer overflow. The root cause is unsafe use of strcpy() and strcat() when constructing device paths during automatic device discovery, allowing a local attacker to craft filenames under /dev...

4.8CVSS6.7AI score0.00137EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/12 11:02 p.m.8 views

CVE-2026-22212 TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...

4.8CVSS6.7AI score0.00137EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/12 12:00 a.m.29 views

PT-2026-2321

Name of the Vulnerable Software and Affected Versions TinyOS versions up to and including 2.1.2 Description TinyOS versions up to and including 2.1.2 have a stack-based buffer overflow issue in the mcp2200gpio utility. This is due to the unsafe use of strcpy and strcat functions when creating...

4.8CVSS6.8AI score0.00137EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/10/15 2:40 p.m.119 views

bluescan

BlueScan - Bluetooth Security Scanner A comprehensive Bluetoo...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/10 4:20 p.m.12 views

CVE-2025-59989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.9AI score0.00235EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/09 6:30 p.m.10 views

EUVD-2025-33377

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.5AI score0.00235EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/09 5:16 p.m.21 views

CVE-2025-59989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS0.00235EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/09 4:11 p.m.4 views

CVE-2025-59989 Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS6.5AI score0.00235EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/09 4:11 p.m.28 views

CVE-2025-59989

CVE-2025-59989 affects Juniper Networks Junos Space prior to version 24.1R4. The issue is an Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) on the Device Discovery page, allowing an attacker to inject script tags which, when viewed by another user, can execute ...

6.1CVSS6.5AI score0.00235EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/09 4:11 p.m.31 views

CVE-2025-59989 Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's...

6.1CVSS0.00235EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/09 12:00 a.m.17 views

PT-2025-41425

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An issue exists in Juniper Networks Junos Space that allows an attacker to inject script tags into the Device Discovery page. When another user visits this page, the attacker ca...

6.1CVSS6.6AI score0.00235EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2014-7856

Malware in sbrugna...

4CVSS6.4AI score0.01318EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.9 views

Malicious code in homey-device-discovery (npm)

The package homey-device-discovery was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.9 views

MAL-2025-22518 Malicious code in homey-device-discovery (npm)

The package homey-device-discovery was found to contain malicious code...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/05/14 2:20 p.m.327 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Airplay_Audio_Software_Development_Kit

EN | KR --- 📄 Overview This tool...

6.5CVSS9.2AI score0.03151EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2024/08/31 12:00 a.m.329 views

Moxa UDP Device Discovery

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Moxa UDP Device Discovery', 'Description' = %q The Moxa protocol listens on 4800/UDP and will respond to broadcast or direct traffic. The service...

9.8CVSS7AI score0.19856EPSS
SaveExploits4
CNVD
CNVD
added 2023/07/27 12:00 a.m.46 views

Wyse Management Suite Security Bypass Vulnerability

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A security bypass vulnerability exists in prior versions of Wyse Management Suite...

4.9CVSS6.7AI score0.00452EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/07/27 12:00 a.m.44 views

Wyse Management Suite Information Disclosure Vulnerability

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. An information disclosure vulnerability exists in versions prior to Wyse Management...

4.4CVSS6AI score0.00128EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/14 12:00 a.m.48 views

Wyse Management Suite has an unspecified vulnerability (CNVD-2023-09782)

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, Inc. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.A security vulnerability exists in Wyse Management Suite version 3.8. An attacker could...

5.3CVSS2.2AI score0.0047EPSS
SaveExploits0References1
Rows per page
Query Builder