CVE-2026-2264

A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery SSRF and exfiltrate service account access tokens. For successful exploitation, an administrator must initially establish an insecure configuration of the API...

EUVD-2025-36670

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

EUVD-2020-4298

Malware in sbrugna...

Axis Communications Multiple IP Cameras Exposed Insecure Interface (CVE-2018-10662)

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siglent SDS 安全漏洞

Siglent SDS is a series of super fluorescent oscilloscopes from Siglent. A security vulnerability exists in the Siglent SDS 1104X-E that stems from an insecure SCPI interface that discloses web passwords...

Chcnav P5E GNSS 安全漏洞

Chcnav P5E GNSS is a global positioning system from Chcnav. A security vulnerability exists in Chcnav P5E GNSS that stems from an insecure P5E GNSS API that displays passwords in clear text...

CVE-2020-11961

Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...

Authentication flaw

Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...

CVE-2020-11961

Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface getconfigresult without authentication...

CVE-2020-11961

The CVE-2020-11961 entry concerns Xiaomi router R3600 ROMs older than 1.0.50, where an insecure get_config_result interface allows sensitive information leakage without authentication. Affected component is the router firmware; impact is confidential data exposure with no integrity or availabilit...

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface...

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface...

CVE-2018-10662

CVE-2018-10662 affects Axis IP Cameras, described as an Exposed Insecure Interface. Connected sources document a multi-stage exploit path: an unauthenticated bypass of .srv functionality enabling a Parhand DBus command flow, leading to potential root command execution (Metasploit module and Explo...

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface...

CVE-2017-2847

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP...

Nisuta NS-WIR150NE, NS-WIR300N Wireless Routers - Remote Management Web Interface Authentication Bypass Vulnerability

No description provided by source. Nisuta NS-WIR150NE, NS-WIR300N Wireless Routers Remote Management Web Interface Authentication Bypass Vulnerability Amplia Security - Amplia Security Research Advisory AMPLIA-ARA050913 Advisory ID: AMPLIA-ARA050913 Advisory URL: tbd Date Published: 12-26-2013...