4404 matches found
CVE-2025-6265
CVE-2025-6265 affects Zyxel NWA50AX PRO firmware versions 7.10(ACGE.2) and earlier. A path traversal vulnerability exists in the file_upload-cgi CGI program that could allow an authenticated administrator to access certain directories and delete files (e.g., the configuration file) on the device....
CVE-2025-7564
A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this...
CVE-2025-7527
A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...
PT-2025-29234
Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RB firmware versions 8.54 Description: A hidden remote support feature, protected by a static secret, allows an authenticated attacker to execute arbitrary OS commands with root privileges. Recommendations: At the moment, there i...
SUSE CVE-2025-38332
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset with...
CVE-2025-7418
A vulnerability was found in Tenda O3V2 1.0.0.123880 and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform/setPing of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. The attack may be launched...
HPESBHF04816 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01153, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Support Pack Gen10 SVTSPGen10 v20250630 HPE SimpliVity 170r Gen10 Server - Prior to HPE SimpliVity Support Pack Gen10...
Texas Instruments CC2652RB LaunchPad SimpleLink 安全漏洞
Texas Instruments CC2652RB LaunchPad SimpleLink is a development kit from Texas Instruments, Inc. A security vulnerability exists in Texas Instruments CC2652RB LaunchPad SimpleLink version 7.41.00.17, which stems from insufficient BLE packet authority checking and could lead to a denial of servic...
VulnCheck KEV: CVE-2024-51977
An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...
Siemens多款产品 加密问题漏洞
Siemens RUGGEDCOM i800 and others are a switch from Siemens Germany. An encryption vulnerability exists in various Siemens products that stems from support for the TLSECDHEECDSAWITHAES128CBCSHA256 cipher suite, which is vulnerable to timing attacks, and could lead to a communication compromise. T...
CVE-2025-50260
Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter...
CVE-2025-50641
Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId...
CVE-2025-34052
The CVE concerns AVTECH IP cameras, DVRs, and NVRs where an unauthenticated request to Machine.cgi?action=get_capability exposes internal device details (firmware version, MAC address, supported codecs). This is an unauthenticated information-disclosure issue, enabling fingerprinting/Discovery bu...
CVE-2025-6886
A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be...
CVE-2024-51977
An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...
CVE-2025-47824
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have cleartext storage of code...
PT-2025-27042 · Flock Safety · Flock Safety Lpr
Name of the Vulnerable Software and Affected Versions: Flock Safety LPR devices with firmware through 2.2 Description: The issue concerns cleartext storage of code in Flock Safety LPR devices. Recommendations: For Flock Safety LPR devices with firmware through 2.2, update to a version that...
PT-2025-27041 · Flock Safety · Flock Safety Lpr
Name of the Vulnerable Software and Affected Versions: Flock Safety LPR devices with firmware through 2.2 Description: The issue concerns a hardcoded password for a system in Flock Safety LPR devices. Recommendations: For Flock Safety LPR devices with firmware through 2.2, consider changing the...
CVE-2025-34042 Beward N100 IP Camera Remote Command Execution
An authenticated command injection vulnerability exists in the Beward N100 IP Camera firmware version M2.1.6.04C014 via the ServerName and TimeZone parameters in the servetest CGI page. An attacker with access to the web interface can inject arbitrary system commands into these parameters, which...