Lucene search
K

74 matches found

Nuclei
Nuclei
added yesterday19 views

Elber ESE DVB-S/S2 - Authentication Bypass

Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. id: CVE-2025-0674 info: name:...

9.8CVSS7.3AI score0.03797EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-1811

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00477EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-11887

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00342EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/07/18 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-0674

Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized...

9.8CVSS5.8AI score0.03797EPSS
In wildExploits1References156
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerability of Elber Communications Equipment’s software products lies in their ability to bypass the authentication process by using an alternative path or channel. This allows attackers to circumvent the authentication procedures.

The vulnerability of Elber Communications Equipment’ software products relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and re-register user credentials...

10CVSS5.5AI score0.03797EPSS
Exploits1References4Affected Software5
RedhatCVE
RedhatCVE
added 2025/04/26 5:4 a.m.11 views

CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack...

9.8CVSS7.2AI score0.00342EPSS
Exploits0References1
NVD
NVD
added 2025/04/18 6:15 p.m.11 views

CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack...

9.8CVSS0.00342EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/18 12:0 a.m.4 views

CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack...

7.1AI score0.00342EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/18 12:0 a.m.11 views

CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack...

0.00342EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/18 12:0 a.m.1 views

Elber REBLE310 Firmware 安全漏洞

Elber REBLE310 Firmware is a microwave link firmware from Elber. A security vulnerability exists in Elber REBLE310 Firmware version 5.5.1.R. The vulnerability stems from improper session management and could lead to a session hijacking attack...

9.8CVSS6.6AI score0.00342EPSS
Exploits0References1
CVE
CVE
added 2025/04/18 12:0 a.m.65 views

CVE-2025-28238

The CVE-2025-28238 entry concerns the Elber REBLE310 Firmware (v5.5.1.R) with improper session management that enables session hijacking. Affected component: firmware on Elber REBLE310 equipment (models REBLE310/RX10/4ASI). Root cause described as inadequate handling of session state allowing an ...

9.8CVSS7.4AI score0.00342EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/18 12:0 a.m.3 views

PT-2025-17327 · Elber · Elber Reble310

Name of the Vulnerable Software and Affected Versions: Elber REBLE310 Firmware version 5.5.1.R Description: The issue is related to improper session management, which allows attackers to execute a session hijacking attack. This can be exploited in the Elber REBLE310 equipment with the model numbe...

9.8CVSS6.6AI score0.00342EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/09 12:24 a.m.18 views

CVE-2025-0675

Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure...

8.7CVSS7AI score0.00477EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/09 12:24 a.m.8 views

CVE-2025-0674

Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized...

9.8CVSS7.2AI score0.03797EPSS
Exploits1References1
NVD
NVD
added 2025/02/07 12:15 a.m.27 views

CVE-2025-0675

Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure...

8.7CVSS0.00477EPSS
Exploits1References1
NVD
NVD
added 2025/02/07 12:15 a.m.9 views

CVE-2025-0674

Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized...

9.8CVSS0.03797EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/07 12:0 a.m.2 views

Elber Communications Equipment 安全漏洞

Elber Communications Equipment is a communications equipment from Elber Corporation. A security vulnerability exists in Elber Communications Equipment that stems from the presence of unauthenticated device configurations and the disclosure of hidden client functionality...

8.7CVSS6.5AI score0.00477EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/07 12:0 a.m.4 views

Elber Communications Equipment 安全漏洞

Elber Communications Equipment is a communications equipment from Elber. A security vulnerability exists in Elber Communications Equipment that stems from an authentication bypass issue that could allow an attacker to overwrite a user's password and gain unauthorized access...

9.8CVSS6.8AI score0.03797EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/02/06 11:43 p.m.5 views

CVE-2025-0675 Elber Communications Equipment Hidden Functionality

Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure...

8.7CVSS7.6AI score0.00477EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/02/06 11:43 p.m.39 views

CVE-2025-0675 Elber Communications Equipment Hidden Functionality

Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure...

8.7CVSS0.00477EPSS
Exploits1References1
Rows per page
Query Builder