CVE-2025-55194

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

CVE-2025-20265

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

CVE-2025-20265

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

CVE-2025-20265 Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

PT-2025-33279 · Kuwfi · Kuwfi 4G Ac900 Lte Router

Name of the Vulnerable Software and Affected Versions: KuWFi 4G LTE AC900 router version 1.0.13 Description: The KuWFi 4G LTE AC900 router is susceptible to Cross-Site Request Forgery CSRF on its web management interface. An attacker can deceive an authenticated administrator into performing...

KuWFi 4G LTE AC900 安全漏洞

KuWFi 4G LTE AC900 is a WiFi router from KuWFi China. A security vulnerability exists in the KuWFi 4G LTE AC900 version 1.0.13, which originates from a cross-site request forgery in the web management interface that could lead to unauthorized configuration changes...

CVE-2024-53946

CVE-2024-53946 concerns the KuWFi 4G LTE AC900 router (version 1.0.13). The core issue is Cross-Site Request Forgery (CSRF) on the router’s web management interface, which can coerce an authenticated admin into performing unintended actions. Documents also reference exploitation of a command inje...

CVE-2025-55194

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

CVE-2025-55194 Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

Part-DB 安全漏洞

Part-DB is a web-based database for managing electronic components from Part-DB Open Source. A security vulnerability exists in Part-DB versions prior to 1.17.3, which stems from the fact that authenticated users can upload files with misleading extensions, potentially leading to a denial of...

Linux Distros Unpatched Vulnerability : CVE-2021-47100

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: Fix UAF when uninstall ipmisi and ipmimsghandler module Hi, When testing install and uninstall of ipmisi.ko and ipmimsghandler.ko, the system crashed. Th...

CVE-2012-10042

Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with default credentials admin:secret and allows authenticated users to upload files via manage.php. The upload mechanism fails to validate file types, enabling...

CVE-2025-20331

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based managemen...

Linux Distros Unpatched Vulnerability : CVE-2021-47095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipmi: ssif: initialize ssifinfo-client early During probe ssifinfo-client is dereferenced in...

CVE-2025-20332

Cisco ISE CVE-2025-20332 affects the web-based management interface of Cisco Identity Services Engine. The root cause is server-side permission validation for Administrators, enabling an authenticated, remote attacker to modify configuration by sending a crafted HTTP request. The impact described...

CVE-2025-20331

CVE-2025-20331 affects Cisco Identity Services Engine (ISE) and Cisco ISE-PIC, via the web-based management interface. It enables stored XSS when an attacker with at least a low-privileged account authenticates and injects malicious code into interface pages. Impact from the sources indicates exe...

CVE-2025-20331 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based managemen...

PT-2025-32190 · Cisco · Cisco Ise-Pic +1

Name of the Vulnerable Software and Affected Versions: Cisco ISE and Cisco ISE-PIC affected versions not specified Description: A vulnerability exists in the web-based management interface that could allow an authenticated, remote attacker to conduct a stored Cross-Site Scripting XSS attack again...

Cisco Identity Services Engine (cisco-sa-ise_xss_acc_cont-YsR4uT4U)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability...

Cisco ISE和Cisco ISE-PIC 安全漏洞

Cisco ISE and Cisco ISE-PIC are both products of Cisco, Inc.Cisco ISE is a NAC solution. It is used to manage access to network resources by endpoints, users, and devices in a zero-trust architecture.Cisco ISE-PIC is a component ... A security vulnerability exists in Cisco ISE and Cisco ISE-PIC...