The vulnerability of the sub_41A0F8() function (/cgi-bin/cstecgi.cgi) of the TOTOLINK N200RE router’s software allows a hacker to execute any command they desire.

The vulnerability of the sub41A0F8 function /cgi-bin/cstecgi.cgi of the TOTOLINK N200RE router software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2025-9149

CVE-2025-9149 affects Wavlink WL-NU516U1 M16U1_V240425. The vulnerability is in the function sub_4032E4 of the file /cgi-bin/wireless.cgi, where manipulation of the argument Guest_ssid enables command injection. The issue is exploitable remotely, and public exploit details (PoC) have been disclos...

CVE-2025-20301

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20148

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An...

CVE-2025-20306

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficie...

CVE-2025-36088

CVE-2025-36088 affects IBM TS4500 and IBM Diamondback Tape Library web GUIs. The issue is a cross-site scripting flaw in the web interface that lets an authenticated user embed arbitrary JavaScript, potentially altering functionality and exposing credentials within a trusted session. Affected ver...

SMM Memory Corruption Vulnerability in the AMI Aptio's SMM Module Across Multiple Devices

Overview System Management Mode SMM memory corruption vulnerabilities have been identified in UEFI modules present in AMI Aptio UEFI firmware. An attacker could exploit this vulnerability to elevate privileges and execute arbitrary code in the highly privileged SMM environment. Users should apply...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20235 Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

CVE-2025-20235

CVE-2025-20235 is a cross-site scripting (XSS) vulnerability in Cisco Secure Firewall Management Center (FMC) Web UI. Multiple connected sources confirm unauthenticated remote exploitation through insufficient input validation in the FMC web-based management interface, allowing arbitrary script e...

CVE-2025-20218 Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient input validation. An attacker could...

PT-2025-33324 · Cisco · Cisco Secure Firewall Management Center (Fmc)

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Management Center FMC Software affected versions not specified Description: A vulnerability exists in the web-based management interface of Cisco Secure Firewall Management Center FMC Software that could allow an...

CVE-2025-34154 UnForm Server Manager < 10.1.12 Unauthenticated Arbitrary File Read

UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path...

CVE-2025-50608

A buffer overflow vulnerability exists in the Netis WF2880 (version 2.1.40207) wireless router. The flaw is located within the FUN_00471994 function of the cgitest.cgi file. An attacker can trigger this vulnerability by controlling the wl_base_set value in the payload, which can lead to a program...

The vulnerability in the web interface of IBM OpenPages’ enterprise risk management platform allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the IBM OpenPages risk management web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain unauthorized access to protected information...

The vulnerability of the web interface of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file server allows a malicious actor to execute arbitrary JavaScript code and disclose protected information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file server’s software integration interfaces is related to the lack of protective measures for the web interface structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScrip...

The vulnerability of the web interface of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file server allows a malicious actor to execute arbitrary JavaScript code and disclose protected information.

The vulnerability of the IBM Sterling B2B Integrator and the IBM Sterling File Gateway file server’s software integration interfaces is related to the lack of protective measures for the web interface structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScrip...

The vulnerability in the web interface of the IBM Planning Analytics Local software allows a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the IBM Planning Analytics Local software web interface is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, specifically the MC Works64 package, arises from errors in processing .LNK files. This vulnerability allows a intruder to write arbitrary files and trigger service failures.

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection via the MC Works64 interface is related to errors in processing files with the .LNK extension. Exploiting this vulnerability allows an intruder to write arbitrary files and cause service failure...

The vulnerability in the web interface for managing the Cisco Unified Intelligence Center reporting software and the Cisco Unified Contact Center Express operator automation software allows a malicious individual to execute arbitrary commands and increase their privileges.

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the unlimited download of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and...