14567 matches found
CVE-2025-34033
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
UBUNTU-CVE-2025-34034
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
CVE-2025-34034
CVE-2025-34034 relates to a hardcoded credential vulnerability in the Blue Angel Software Suite on embedded Linux devices. The affected software contains multiple default/hardcoded user accounts not disclosed publicly, allowing unauthenticated or low-privilege attackers to gain administrative acc...
CVE-2025-34033 5VTechnologies Blue Angel Software Suite OS Command Injection
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-34033
CVE-2025-34033 affects the Blue Angel Software Suite on embedded Linux devices. The vulnerability is an OS command injection in the webctrl.cgi script through the ping_addr parameter, where input is not properly sanitized before being passed to the system-level ping command. An authenticated atta...
CVE-2025-34033 5VTechnologies Blue Angel Software Suite OS Command Injection
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
TOTOLINK Embedded Web Server DoS
The vulnerability in the embedded web server microprogramming software of TOTOLINK A3002R, A3002RU, A702R, and EX1200T routers is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor t...
5V Technologies Blue Angel Software Suite: Operating System Command Injection Vulnerability
5V Technologies Blue Angel Software Suite is a management and control software suite deployed on embedded Linux devices from 5V Technologies, Taiwan, China. A security vulnerability exists in 5V Technologies Blue Angel Software Suite that originates from an OS command injection attack due to an...
CVE-2025-34033: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-34034: Use of Hard-coded Credentials
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
PT-2025-26661
Name of the Vulnerable Software and Affected Versions: Blue Angel Software Suite affected versions not specified Description: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and...
SLNX PC Client Re-record Files
The vulnerability of the SLNX PC Client of the embedded application and document management tool RICOH Streamline NX relates to improper external manipulation of file names or file paths. Exploiting this vulnerability allows a malicious actor to re-record arbitrary files...
SLNX PC Client Code Execution
The vulnerability of the SLNX PC Client of the embedded application and document management tool RICOH Streamline NX lies in the deletion of files due to incorrect path restrictions for access to restricted directories. Exploiting this vulnerability allows an attacker to execute arbitrary code...
PT-2025-26660
Name of the Vulnerable Software and Affected Versions: Blue Angel Software Suite affected versions not specified Description: An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping addr parameter in the webctrl.cgi script. The...
VulnCheck KEV: CVE-2025-34033
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
VulnCheck KEV: CVE-2025-34034
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
A Retrospective on DISPEED -- Leveraging Heterogeneity in a Drone Swarm for IDS Execution
Swarms of drones are gaining more and more autonomy and efficiency during their missions. However, security threats can disrupt their missions' progression. To overcome this problem, Network Intrusion Detection Systems NIDS are promising solutions to detect malicious behavior on network traffic...
Malicious code in pythondm32 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2350dbde660e08d6f97a447886432a41c60802af7e1396dabff53af3ec9091f6 The embedded dm3.1233.dll has a very high recognition as malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...