Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3334)

A vulnerability in the ARP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series Security Appliances could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in ...

CVE-2025-71383

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...

CVE-2025-71383

The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a crash of the management interface. This issue arises from an error in a JSON parser when processing a request from the local Wi-Fi network that lacks a username or password field for the /api/login endpoint. While a reference link is provided,...

Command Injection vulnerability exists in Brocade Fabric OS REST API management interface

: A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...

Command Injection Vulnerabilities in Brocade Fabric OS Management Interface and Authentication Workflows

: Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow...

Brocade Fabric OS authentication and access control bypass via HTTP host header spoofing

: An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual...

Command injection vulnerability exists in the REST API management interface of Brocade Fabric OS (CVE-2026-94581)

: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

Arbitrary file manipulation vulnerability exists in the Brocade Fabric OS WebTools management

: An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file...

Authentication bypass on Brocade MXG610 (CVE-2026-94585)

: An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

Apache Configuration Injection via Unsanitized IdP Issuer Setting in Brocade Fabric OS Web Service Interface

: An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication FA, the system fails to sanitize the Identity Provider IdP issuer parameter. An authenticated administrator—or an...

Privilege Escalation / Access Control Bypass in Brocade Fabric OS account management interface (CVE-2026-94576)

: An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying...

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1 (CVE-2026-94583)

: A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable an...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 — это обход аутентификации в программном обеспечении Palo Alto Networks PAN-OS, который позволяет неаутентифицированному злоумышленнику, имеющему сетевой доступ к веб-интерфейсу управления, получить привилегии администратора PAN-OS для выполнения административных...

VulnCheck KEV: CVE-2026-95675

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

CVE-2024-7593

CVE-2024-7593 설명: CVE-2024-7593은 Pulse Secure VPN을 포함한 여러 Pulse Secure 제품에 영향을 미치는 치명적인 취약점입니다. 이 취약점은 관리 인터페이스에 접근 권한이 있는 인증된 공격자가 영향을 받는 서버에서 임의의 명령을 실행할 수 있게 합니다. 이로 인해 악성 코드가 실행되어 시스템의 무결성과 가용성이 손상될 수 있습니다. 기술적 세부 사항 유형: 원격 코드 실행RCE. 심각도: 치명적CVSS: 9.8. 영향을 받는 버전: 특정 버전의 Pulse Secure VPN이 영향을...

CVE-2024-20404

Описание Уязвимость в веб-интерфейсе управления Cisco Finesse может позволить неаутентифицированному удалённому злоумышленнику провести SSRF-атаку на уязвимую систему. Эта уязвимость вызвана недостаточной проверкой вводимых пользователем данных для определенных HTTP-запросов, отправляемых на...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS: Уязвимость внедрения команд ОС в GlobalProtect Проверщик Pan-OS предназначен для определения версии программного обеспечения Palo Alto PAN-OS удаленного портала GlobalProtect или интерфейса управления. Перед запуском скрипта убедитесь, что файл version-table.tx...

CVE-2026-19745

소개 안녕하세요 여러분, 지난 5월에 제 라우터에서 괜찮은 취약점들을 발견했는데, 드디어 오늘 모두에게 공개할 수 있게 되었습니다! 이 저장소에 있는 두 취약점 모두 인증된 서비스 거부Denial of Service 취약점입니다! 이 취약점들이 어떻게, 왜 발생하는지에 대한 정확한 기술적 세부 사항은 알지 못합니다. Calix이 경우 벤더로부터 답변을 받지 못했거든요. 그래서 어쨌든 재밌네요! 이건 제 첫 번째이자 두 번째 CVE이기도 합니다. 2개를 1개 가격에, 문제없죠. CVE-2026-19745 CVE-2026-1974...

CVE-2023-31853

CVE-2023-31853 Отражённая межсайтовая скриптовая атака XSS существует в веб-интерфейсе управления Cudy LT400. Страница /cgi-bin/luci/admin/network/bandwidth имеет отражённый XSS через параметр icon. Методы эксплуатации включают отправку жертве специально сформированного запроса, содержащего...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — Обход аутентификации PAN-OS → цепочка повышения привилегий CVE| Описание| CVSS ---|---|--- CVE-2024-0012| Обход аутентификации интерфейса управления PAN-OS| 9.3 CVE-2024-9474| Повышение привилегий PAN-OS| 6.9 При объединении эти уязвимости позволяют...