CVE-2025-32471

The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks...

CVE-2025-32471

The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks...

CVE-2025-32471 Reuse of salt

The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks...

CVE-2025-32471 Reuse of salt

The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks...

CVE-2025-32471

CVE-2025-32471 concerns SICK device password handling where passwords are not adequately salted, enabling potential password extraction. Connected sources reference SICK Flexi Compact and related controllers (e.g., FLX0-GPNT100, FLX3-CPUC200) as affected. The CVE description and Red Hat/NVD entri...

CVE-2025-46652

In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files. NOTE: this is disputed because Mark-of-the-Web propagation can increase risk via...

PT-2025-18055 · Sick Ag · Sick Flx3-Cpuc200

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to inadequate salting of device passwords, making them susceptible to password extraction attacks. Recommendations: At the moment, there is no information about a newer...

SICK FLX0-GPNT100和SICK FLX3-CPUC200 安全漏洞

The SICK FLX0-GPNT100 and SICK FLX3-CPUC200 are both products of SICK, Germany.The SICK FLX0-GPNT100 is a photoelectric sensor for precise object detection and localization in industrial automation.The SICK FLX3-CPUC200 is a high-performance photoelectric sensor controller designed for complex SI...

Exploit for Code Injection in Craftcms Craft_Cms

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview...

CVE-2025-46578

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information...

CVE-2025-46578

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information...

CVE-2025-46577

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information...

CVE-2025-46578

CVE-2025-46578 concerns SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information. The connected documents consistently describe GoldenDB’s SQL injection risk but do n...

CVE-2025-46578 ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information...

CVE-2025-46578 ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information...

CVE-2025-46577 ZTE GoldenDB Database product has an SQL injection vulnerability

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information...

CVE-2025-46577 ZTE GoldenDB Database product has an SQL injection vulnerability

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information...

PT-2025-17976 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue is related to a SQL injection vulnerability in the GoldenDB database product. This allows attackers to inject commands to extract database information. Recommendations: At the...

PT-2025-17977 · Goldendb · Goldendb

Name of the Vulnerable Software and Affected Versions: GoldenDB affected versions not specified Description: The issue concerns SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive...

CVE-2025-46652

In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files. NOTE: this is disputed because Mark-of-the-Web propagation can increase risk via...