Lucene search
+L

636 matches found

Cvelist
Cvelist
added 2025/12/24 7:28 p.m.41 views

CVE-2019-25251 Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xmlurl'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP...

6.9CVSS0.00338EPSS
SaveExploits2References3
CVE
CVE
added 2025/12/24 7:28 p.m.36 views

CVE-2019-25251

CVE-2019-25251 affects Teradek VidiU Pro 3.0.3. The vulnerability is a server-side request forgery in the management interface that allows manipulation of the GET parameters url and xml_url, enabling attackers to bypass firewalls, perform network enumeration, and potentially trigger external HTTP...

6.9CVSS6.7AI score0.00338EPSS
SaveExploits2References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/10 9:16 p.m.14 views

CVE-2021-47703

OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip'...

7.2CVSS7.1AI score0.00314EPSS
SaveExploits2References1
NVD
NVD
added 2025/12/10 9:16 p.m.9 views

CVE-2020-36884

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

6.9CVSS0.01135EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/09 9:31 p.m.11 views

EUVD-2021-34736

OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip'...

6.9CVSS6.6AI score0.00314EPSS
SaveExploits2References5
OSV
OSV
added 2025/12/09 9:15 p.m.9 views

CVE-2021-47703

OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip'...

7.2CVSS5.9AI score0.00314EPSS
SaveExploits2References4
NVD
NVD
added 2025/12/09 9:15 p.m.11 views

CVE-2021-47703

OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip'...

7.2CVSS0.00314EPSS
SaveExploits2References4
CVE
CVE
added 2025/12/09 8:36 p.m.30 views

CVE-2021-47703

OpenBMCS 2.4 is affected by CVE-2021-47703, a server-side request forgery (SSRF) vulnerability that is unauthenticated. The flaw allows an attacker to bypass firewalls and perform service and network enumeration on the internal network by providing an external domain in the ip parameter, causing ...

7.2CVSS6.7AI score0.00314EPSS
SaveExploits2References4Affected Software1
GithubExploit
GithubExploit
added 2025/12/09 6:41 a.m.198 views

Exploit for Deserialization of Untrusted Data in Facebook React

⚡ CVE-2025-55182 – Advanced Auto Exploit Toolkit Precisi...

10CVSS7.2AI score0.99802EPSS
SaveExploits388
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.13 views

PT-2025-50233

Name of the Vulnerable Software and Affected Versions OpenBMCS version 2.4 Description The software contains an unauthenticated Server-Side Request Forgery SSRF issue. This allows attackers to bypass firewalls and perform service and network enumeration on the internal network. Attackers can...

7.2CVSS6.9AI score0.00314EPSS
SaveExploits2References7
NVD
NVD
added 2025/12/01 4:15 p.m.10 views

CVE-2024-32388

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected...

5.3CVSS0.01202EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/01 4:15 p.m.8 views

CVE-2024-32388

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected...

5.3CVSS5.8AI score0.01202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/01 12:00 a.m.8 views

PT-2025-48466

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected...

5.3CVSS6.8AI score0.01202EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/01 12:00 a.m.14 views

CVE-2024-32388

Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected...

5.3CVSS0.01202EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/01 12:00 a.m.26 views

CVE-2024-32388

CVE-2024-32388 affects Kerlink KerOS prior to 5.12. The root cause is a firewall misconfiguration that causes devices to incorrectly accept specially crafted UDP packets, enabling an attacker to bypass the firewall and access UDP-based services that would otherwise be protected. The connected doc...

5.3CVSS6.4AI score0.01202EPSS
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
added 2025/10/27 3:32 p.m.130 views

Exploit for Deserialization of Untrusted Data in Microsoft

WSUSResponder v1.0.1 Module PowerShell de réponse à l'inc...

9.8CVSS7.8AI score0.99979EPSS
SaveExploits24
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2002-2042

Malware in sbrugna...

7.5CVSS6.4AI score0.01983EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-12893

Malware in sbrugna...

7.2CVSS6.8AI score0.01955EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-3029

Malware in sbrugna...

10CVSS9.5AI score0.01545EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-3293

Malware in sbrugna...

9.8CVSS8.2AI score0.04208EPSS
SaveExploits0References2
Rows per page
Query Builder