VulnCheck KEV: CVE-2025-0890

UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but...

Atos Unify OpenScape SBC Security Vulnerability

Atos Unify OpenScape SBC is a datacenter-ready virtualization security application from Atos France. It is used to securely extend your applications beyond the network perimeter. A security vulnerability exists in Atos Unify OpenScape SBC prior to V10 R3.4.0, OpenScape Branch prior to V10 R3.4.0,...

CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...

CVE-2016-1199

The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200...

The cloud from the enterprise built Station system through the kill oday-vulnerability warning-the black bar safety net

Saying boring to code the site the next set of program analysis Can be to the cloud from the enterprise built Station system, download the number very much so look up First saw it in the background of the login. the asp file. A look at the side of there ass and... if request. Form"submit""" then ...

Thousand Bo enterprise website management system(NWEB System)background holding shell-vulnerability warning-the black bar safety net

Management log in:/system/adminlogin. asp 'Management account: admin 'Key code: admin888 ' 'Site data:/Database/NwebCnSite. mdb conventional content database '/Database/BakNwebCnSite. mdb backup the content database '/Database/NwebCnStat. mdb conventional flow database '/Database/BakNwebCnStat. m...

Cross site scripting

Cross-site scripting XSS vulnerability in the management login GUI page in Symantec LiveUpdate Administrator LUA before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different...