CVE-2025-14108

A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safedir causes command injection. It is possible to initiate...

CVE-2025-14106 ZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injection

A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2api.CloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. The manipulation of the argument safedir leads to command injection. The attack is possible to be carried o...

PT-2025-49316

Name of the Vulnerable Software and Affected Versions ZSPACE Q2C NAS versions up to 1.1.0210050 Description A command injection issue exists in ZSPACE Q2C NAS. The issue is related to the manipulation of the safe dir argument within the zfilev2 api.CloseSafe function, located in the...

CVE-2025-56427

A Directory Traversal vulnerability exists in ComposioHQ (specifically versions up to v.0.7.20 ) and the composio-core package (versions >=0.3.13,

Exploit for CVE-2024-32019

The ndsudo vulnerability allows an attacker to gain root permiss...

The vulnerability of D-link DIR-816A2 router microprogramming software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of D-link DIR-816A2 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the soapcgi_main() function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the soapcgimain function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code...

The vulnerability of the sub_432F60 function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub432F60 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_4438A4() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability in the web interface of the D-Link DIR-1260 router’s microprogramming software allows a hacker to execute arbitrary commands with root privileges.

The vulnerability in the web interface of the D-Link DIR-1260 router operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the SetDest/Dest/Target parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the /tmp/new_qos.rule file in D-link DIR-823G router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /tmp/newqos.rule file in D-link DIR-823G router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of D-Link DIR-823G A1 router’s microprogramming software, related to buffer overflow, allows a hacker to trigger a service failure.

The vulnerability of D-Link DIR-823G A1 router microprogramming software is related to an overflow in the buffer of the FillMacCloneMac parameter at the end point /EXCUSHELL. Exploiting this vulnerability can allow a remote attacker to trigger a Denial-of-Service attack using fake input data...

The vulnerability of function sub_4455BC in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4455BC in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of the Common.getHomeDir() function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the Common.getHomeDir function in the multi-platform web solution for creating Scada systems in Scada-LTS is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attac...

EUVD-2025-199936

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

CVE-2025-13791 Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

CVE-2025-13791

The CVE-2025-13791 issue affects Scada-LTS up to version 2.7.8.1, specifically the Common.getHomeDir function in br/org/scadabr/vo/exporter/ZIPProjectManager.java of the Project Import component. The vulnerability enables path traversal, with the attack potentially executable remotely. Public exp...

CVE-2025-13791 Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

Scada-LTS 路径遍历漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A path traversal vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from a path traversal issue in the Common.getHomeDir function in the file...