3157 matches found
PT-2025-37942
Name of the Vulnerable Software and Affected Versions: Control-M/Agent versions 9.0.18 through 9.0.20 Description: Out-of-support versions of Control-M/Agent configured to use the non-default Blowfish cryptography algorithm utilize a hardcoded key. An attacker with network access and knowledge of...
CVE-2025-9826
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users...
CVE-2025-9826
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users...
CVE-2025-9826
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users...
CVE-2025-9826
The vulnerability CVE-2025-9826 affects M-Files Hubshare versions before 25.8, where a stored cross-site scripting flaw can allow authenticated users to execute scripts in other users’ contexts. Publicly disclosed details in multiple feeds confirm the affected product (M-Files Hubshare), the issu...
CVE-2025-9826
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users...
M-Files Hubshare 安全漏洞
M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents, and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 25.8, which stems from stored cross-site scripting and could lead to script execution by...
CVE-2025-57578
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-57578
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
H3C Magic M 安全漏洞
H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M that stems from the use of a default password that could lead to remote execution of arbitrary code...
CVE-2025-57578
CVE-2025-57578 affects H3C Magic M Device M2V100R006. The vulnerability arises from the use of the default password, enabling a remote attacker to execute arbitrary code over the network with low privileges required and user interaction needed. The available connected documents confirm the affect...
Linux Distros Unpatched Vulnerability : CVE-2021-40327
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on...
MAL-2025-42993 Malicious code in @zalastax/nolb-_dsr-rollback-org-m (npm)
The package @zalastax/nolb-dsr-rollback-org-m was found to contain malicious code...
OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.
...
HPESBST04945 rev.1 - HPE M-Series Switches Using NVIDIA Cumulus Software, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SN4600cM 100GbE 64QSFP28 Power to Connector Airflow Switch SN4600cM with NVIDIA Cumulus - NVIDIA Cumulus 5.9.2, and 5.11.1 HPE SN2100M 100GbE 16QSFP28 Power to Connector...
Linux Distros Unpatched Vulnerability : CVE-2020-15007
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because i...
CVE-2025-36729 RACOM M!DGE2 Privilege Escalation via SDK Testing Endpoint
A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password. This vulnerability also allows the user to give themselves shell access with the root gid...
CVE-2025-9470
CVE-2025-9470 affects itsourcecode Apartment Management System 1.0. The vulnerability lies in /management/add_m_committee.php where manipulation of the ID parameter enables SQL injection, potentially exploitable remotely. The exploit has been published and multiple sources describe a SQL‑injectio...
itsourcecode Apartment Management System 安全漏洞
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /management/addmcommittee.php. An attacker can exploit th...
