13739 matches found
CVE-2021-47703
OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip'...
CVE-2021-47703
OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip'...
CVE-2021-47703
OpenBMCS 2.4 is affected by CVE-2021-47703, a server-side request forgery (SSRF) vulnerability that is unauthenticated. The flaw allows an attacker to bypass firewalls and perform service and network enumeration on the internal network by providing an external domain in the ip parameter, causing ...
EUVD-2025-202049
Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This...
CVE-2025-62468
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
CVE-2025-62468
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
EUVD-2025-202223
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
CVE-2025-62468 Windows Defender Firewall Service Information Disclosure Vulnerability
...
CVE-2025-62468 Windows Defender Firewall Service Information Disclosure Vulnerability
...
CVE-2025-62468
CVE-2025-62468 is a Windows Defender Firewall Service information-disclosure vulnerability caused by an out-of-bounds read that can disclose information locally to an authorized attacker. The issue is described consistently across sources as a local-privilege/ information-disclosure exposure affe...
CVE-2025-12381
Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This...
CVE-2025-12381
Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This...
SqlScanner
SqlScanner SQL Injection Scanner deve...
CVE-2025-12381 Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer
Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This...
CVE-2025-12381 Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer
Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This...
CVE-2025-12381
AlgoSec Firewall Analyzer (Linux, 64âbit) is affected by CVE-2025-12381 due to improper privilege management in a sudoersâauthorized command. A local user with CLI access can escalate privileges by abusing parameters of that approved command, enabling privilege escalation and parameter injection....
Windows Defender Firewall Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
Exploit for Deserialization of Untrusted Data in Facebook React
⥠CVE-2025-55182 â Advanced Auto Exploit Toolkit Precisi...
Algosec Firewall Analyzer ĺŽĺ ¨ćźć´
Algosec Firewall Analyzer is a firewall policy management tool from Algosec USA. A security vulnerability exists in Algosec Firewall Analyzer version A33.0 and A33.10, which stems from improper privilege management and could lead to elevation of privilege and parameter injection attacks...
Fortinet FortiWeb ć°ćŽäźŞé éŽé˘ćźć´
Fortinet FortiWeb is a Web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures Web applications and protects sensitive database content. A data forgery vulnerability exists in...