293 matches found
CVE-2026-24169
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...
CVE-2026-24169
NVIDIA UFM Enterprise contains a vulnerability in its plugin management API . An authenticated user with low privileges can inject code by sending a specially crafted API request. A successful exploit may lead to code execution , privilege escalation , and information disclosure . The CVSS 3.1 sc...
EUVD-2026-65609
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...
CVE-2026-24169
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...
CVE-2021-45232-RCE
Apache APISIX Dashboard RCE root@kitploit: usage: -h -u URL -p PORT -c CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url e.g: http://127.0.0.1:9000 -p PORT, --port PORT apisix management port default: 9080 -c CMD, --cmd CMD command default: ifconfig 参...
UniFi Access - Broken Access Control
UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access. id: CVE-2025-52665 info: name:...
Check-Point-Trusted-Access-Review
Check Point Trusted Access Review ベンダーのパッチは可能な限り迅速に適用してください。 信頼できるCheck Point Management APIコマンドを使用してCheck Point Trusted Access Reviewを実施するためのローカルWebアプリケーションです。ほとんどのチェックは確認のみです。利用可能な修復アクションには、明示的なオペレーターの承認が必要です。 このスキャナーは、CVE-2026-16232...
CVE-2025-54914-PoC
CVE-2025-54914 Azure 경로 익스플로잇 개요 이것은 CVE-2025-54914 Azure Networking 경로 익스플로잇의 개선된 구현입니다. 이 버전은 핵심 CVE 기능을 유지하면서 지속성, 회피, 다중 대상 스캐닝 및 오류 처리와 같은 추가 기능을 제공합니다. 기능 핵심 CVE 기능 경로 생성 : Azure 가상 네트워크에 악성 경로를 생성합니다. 경로 삭제 : 생성된 경로를 정리하기 위해 제거합니다. API 호환성 : Azure Management API 2025-09-01과 함께 작동합니다. 인증 :...
CheckPoint-CVE-Webscanner
CVE 网页检查工具 一个基于审批的本地 Web 应用，用于扫描和修复潜在的 Check Point CVE-2026-50751 和 CVE-2026-50752 漏洞，使用受信任的 Check Point 管理 API 命令。 该工具并非由 Check Point 创建或支持，使用风险自负。修复措施是临时的。Check Point 建议尽快使用 Check Point 安全公告 中为每个 CVE 提供的补丁进行修补。 该应用在本地运行，登录到 Check Point 安全管理服务器或 MDS，扫描相关 VPN 配置，精确显示可能需要修复的位置，允许操作员批准更改，通过管理 API...
CVE-2026-15706 Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS
Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application BMS allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application BMS: before v1.1.10.142...
CVE-2026-15706
CVE-2026-15706 is a critical authentication bypass in the Management API of Baylan Smart Meter Management Application (BMS) by Baylan Measuring Instruments Industry and Trade Inc. The vulnerability stems from missing authentication for a critical function , allowing unauthenticated network access...
CVE-2026-15706 Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS
Missing authentication for critical function vulnerability in Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application BMS allows Authentication Bypass. This issue affects Baylan Smart Meter Management Application BMS: before v1.1.10.142...
EUVD-2026-63165
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
CVE-2026-76761
CVE-2026-76761 is an OS command injection vulnerability in chenhg5 cc-connect (up to version 1.4.1). The flaw resides in the shellExecCommand function within core/engine.go , part of the Management API component. An attacker can remotely manipulate the exec argument to inject and execute arbitrar...
CVE-2026-76761 chenhg5 cc-connect Management API engine.go shellExecCommand os command injection
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: pinot, tez, pinot-fips, management-api-for-apache-cassandra-5.0, hadoop-fips, celeborn, seata, thingsboard, apache-hop-fips, trino, management-api-for-apache-cassandra-4.1...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: pinot, tez, pinot-fips, management-api-for-apache-cassandra-5.0, hadoop-fips, celeborn, seata, thingsboard, apache-hop-fips, trino, management-api-for-apache-cassandra-4.1...
