15713 matches found
CVE-2025-24948
In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records...
Demtec Graphytics 代码注入漏洞
Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of HTTP GET parameters in the /visualization file, which could lead to a cross-site scripting attack...
CVE-2025-24948
CVE-2025-24948 affects JotUrl 2.0, where passwords are transmitted via HTTP GET requests. Root cause: sensitive credentials sent in URL parameters, exposing them to eavesdropping or insecure records. Impact: credential exposure risk (as described in sources). The CVSS v3.1 base score is 6.5 (Medi...
CVE-2025-24948
In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records...
CVE-2025-3546
A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGICheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POS...
The vulnerability of the auth_asp function in D-link DI-8100 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the authasp function in D-link DI-8100 router microprogramming systems is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted GET request remotely...
Agent Zero 路径遍历漏洞
Agent Zero is an artificial intelligence framework by the individual developer Jan Tomášek. A path traversal vulnerability exists in Agent Zero version 0.8.1.2, which stems from improper manipulation of the parameter path in the file /getworkdirfiles, which could lead to a path traversal attack...
Vulnerability of the get_firmware_info_v3_2() function in the drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems, which allows a hacker to cause a service failure.
Vulnerability of the getfirmwareinfov32 function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c module – The driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is vulnerable due to a NULL pointer dereferencing issue. Exploiting thi...
The vulnerability of the hugetlb component of the try_get_folio() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hugetlb component in the trygetfolio function of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Apache Pinot OLAP data store, related to incorrect restrictions on the path name to the restricted catalog, allows attackers to disclose protected information.
The vulnerability of the Apache Pinot OLAP data store is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to expose protected information by sending a specially crafted GET request...
H3C多款产品 注入漏洞
H3C Magic NX30 Pro and others are products of China's Xinhua San H3C.H3C Magic NX30 Pro is a home router that supports WiFi6 3000M rate.H3C Magic NX15 is a router.H3C Magic NX400 is a router. An injection vulnerability exists in several H3C products. The vulnerability stems from a command injecti...
PT-2025-16191 · H3C · H3C Magic Nx15 +3
Name of the Vulnerable Software and Affected Versions: H3C Magic NX15, Magic NX30 Pro, Magic NX400, and Magic R3010 versions up to V100R014 Description: A critical issue has been found in the affected devices, specifically in the function FCGI WizardProtoProcess of the /api/wizard/getSpecs endpoi...
OESA-2025-1411 cobbler security update
Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...
CVE-2025-32807
A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...
MiniCMS 1.1 - Cross Site Scripting (XSS)
Exploit Title: MiniCMS 1.1 - Cross Site Scripting XSS Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/bg5sbk/MiniCMS Software Link: https://github.com/bg5sbk/MiniCMS Version: 1.10 Tested on: Ubuntu Windows CVE : CVE-2018-1000638 PoC: GET...
The vulnerability of the hsr_get_node() function in the net/hsr/hsr_framereg.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the hsrgetnode function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, stems from the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...
hdf5: multiple CVEs
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...
CVE-2025-3405
A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /rest/cliente/ObterPedido/ of the component HTTP GET Request Handler. The manipulation of the argument ORDERID leads ...
The vulnerability of the cpufreq_cpu_get_raw() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cpufreqcpugetraw function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2025-20359
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel. The scmi cpufreq get rate function does not check if cpufreq cpu get raw returns NULL when the target CPU is not...