Lucene search
+L

4376 matches found

Cvelist
Cvelist
•added 2025/12/04 6:32 p.m.•53 views

CVE-2025-14015 H3C Magic B0 aspForm EditWlanMacList buffer overflow

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

9CVSS0.00808EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/12/04 6:32 p.m.•10 views

CVE-2025-14015 H3C Magic B0 aspForm EditWlanMacList buffer overflow

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

9CVSS7.8AI score0.00808EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•3 views

CVE-2025-14015: Buffer Copy without Checking Size of Input

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

9.8CVSS5.7AI score0.00808EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/04 12:00 a.m.•25 views

PT-2025-49113

Name of the Vulnerable Software and Affected Versions H3C Magic B0 versions up to 100R002 Description A weakness exists in H3C Magic B0 up to version 100R002. The issue involves the EditWlanMacList function within the /goform/aspForm file. Manipulation of the param argument can lead to a buffer...

9.8CVSS8.6AI score0.00808EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/12/04 12:00 a.m.•24 views

H3C Magic B0 安全漏洞

The H3C Magic B0 is a small wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B0 100R002 and prior versions, which stems from incorrect manipulation of the parameter param in the file /goform/aspForm, which could result in a buffer overflow...

9.8CVSS8.9AI score0.00808EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/12/01 6:30 p.m.•16 views

EUVD-2024-55105

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

8.1CVSS7.2AI score0.00516EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/01 4:15 p.m.•15 views

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

8.1CVSS6AI score0.00516EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/01 4:15 p.m.•17 views

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

8.1CVSS0.00516EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/01 12:00 a.m.•24 views

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

0.00516EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/01 12:00 a.m.•20 views

PT-2025-48467

Name of the Vulnerable Software and Affected Versions KerOS versions prior to 5.12 Description The wmp-agent service does not correctly validate ‘magic URLs’, potentially allowing a remote attacker without authentication to execute arbitrary operating system commands as root if the service is...

8.1CVSS6.6AI score0.00516EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/12/01 12:00 a.m.•8 views

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

6.7AI score0.00516EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•4 views

CVE-2024-39148: Improper Control of Generation of Code

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

8.1CVSS6.4AI score0.00516EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•26 views

Kerlink KerOS 安全漏洞

Kerlink KerOS is an operating system from the French company Kerlink. A security vulnerability exists in Kerlink KerOS versions prior to 5.12 that stems from the wmp-agent service not properly validating magic URLs, which could allow an unauthenticated remote attacker to execute arbitrary OS...

8.1CVSS7.6AI score0.00516EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/01 12:00 a.m.•78 views

CVE-2024-39148

The KerOS operating system (versions prior to 5.12 ) is vulnerable to a security flaw in the wmp-agent service. The service fails to properly validate so-called 'magic URLs' , which could allow an unauthenticated remote attacker to execute arbitrary OS commands with root privileges if the service...

8.1CVSS6.7AI score0.00516EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
•added 2025/11/27 3:28 p.m.•21 views

One Identity Safeguard Named a Visionary in the 2025 Gartner Magic Quadrant for PAM

Alisa Viejo, CA, USA, 27th November 2025, CyberNewsWire...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/11/27 12:00 a.m.•21 views

编号撤回

req is a simple Go HTTP client using Black Magic by roc personal developer. ring is a library by Brian Smith personal developer. This CVE number has been withdrawn...

5.7AI score0.00474EPSS
SaveExploits5References3
Qualys Blog
Qualys Blog
•added 2025/11/24 5:16 p.m.•71 views

From Vision to Value: Gartner® Identifies Qualys as 2025 Magic Quadrant™ Leader in Exposure Assessment Platforms

Why Was Qualys Named a Leader in Exposure Assessment Platforms? We're proud to share that Qualys has been named a Leader in the 2025 Gartner® Magic Quadrant for Exposure Assessment Platforms. We believe this recognition reflects our forward-thinking vision and the proven value of the Qualys...

6.9AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2025/11/21 5:00 p.m.•17 views

Microsoft named a Leader in the Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year

I'm deeply grateful to our customers and partners for their continued trust and collaboration. We’re happy to share that Microsoft has been recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year. We feel this recognition underscores the...

7.1AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2025/11/21 5:00 p.m.•17 views

Microsoft named a Leader in the Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year

I'm deeply grateful to our customers and partners for their continued trust and collaboration. We’re happy to share that Microsoft has been recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for Access Management for the ninth consecutive year. We feel this recognition underscores the...

7.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/11/14 12:23 a.m.•10 views

SUSE CVE-2025-40199

In the Linux kernel, the following vulnerability has been resolved: pagepool: Fix PPMAGICMASK to avoid crashing on some 32-bit arches Helge reported that the introduction of PPMAGICMASK let to crashes on boot on his 32-bit parisc machine. The cause of this is the mask is set too wide, so the...

5.5CVSS6AI score0.00141EPSS
SaveExploits0References10
Rows per page
Query Builder