13557 matches found
CVE-2025-54083
Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT Quantenna SoC modules allows admin access to the web interface.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE...
CVE-2025-54083 Calix GigaCenter ONT firmware - Sensitive Information Disclosure
Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT Quantenna SoC modules allows admin access to the web interface.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE...
CVE-2025-53914
Excessive Privileges vulnerability in Calix GigaCenter ONT Broadcom SoC modules allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G...
CVE-2025-47415
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCREENS x70: from 3.000.0110.001 before 3.001.0031.001. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected...
CVE-2025-7635
CVE-2025-7635 affects Calix GigaCenter ONT series (844E, 844G, 844GE, 854GE). Descriptions in connected sources confirm an unauthenticated Telnet service that can grant root access to the device. This is a local-access issue with no user interaction required. Remediation guidance in PT-Security a...
CVE-2025-53914 Calix GigaCenter ONT (Broadcom SoC) - Excessive Privileges
Excessive Privileges vulnerability in Calix GigaCenter ONT Broadcom SoC modules allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G...
CVE-2025-29089
An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...
CGA-52VJ-6V7V-2782
Bulletin has no description...
CVE-2025-40802
A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering onc...
CVE-2025-40803
A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality...
Aspect-Oriented Programming in Secure Software Development: a Case Study of Security Aspects in Web Applications
Security remains a critical challenge in modern web applications, where threats such as unauthorized access, data breaches, and injection attacks continue to undermine trust and reliability. Traditional Object-Oriented Programming OOP often intertwines security logic with business functionality,...
LLM Detected
The scanner detected the presence of a Large Language Model LLM on the target application. LLMs are advanced AI models capable of understanding and generating human-like text based on the input they receive. They are commonly used in various applications, including chatbots, virtual assistants,...
Rockwell Automation多款产品 安全漏洞
Rockwell Automation 1756-EN4 and others are products of Rockwell Automation, Inc.Rockwell Automation 1756-EN4 is a controller.Rockwell Automation 1756-ENT2R is an Ethernet communication The Rockwell Automation 1756-ENT4R is an Ethernet communication module. A security vulnerability exists in...
PT-2025-36956
Name of the Vulnerable Software and Affected Versions: Calix GigaCenter ONT versions 844E Calix GigaCenter ONT versions 844G Calix GigaCenter ONT versions 844GE Calix GigaCenter ONT versions 854GE Description: An unauthenticated Telnet access issue exists in Calix GigaCenter ONT, allowing root...
PatchSeeker: Mapping NVD Records to Their Vulnerability-Fixing Commits with LLM Generated Commits and Embeddings
Software vulnerabilities pose serious risks to modern software ecosystems. While the National Vulnerability Database NVD is the authoritative source for cataloging these vulnerabilities, it often lacks explicit links to the corresponding Vulnerability-Fixing Commits VFCs. VFCs encode precise code...
Backdoor Attacks and Defenses in Computer Vision Domain: a Survey
Backdoor trojan attacks embed hidden, controllable behaviors into machine-learning models so that models behave normally on benign inputs but produce attacker-chosen outputs when a trigger is present. This survey reviews the rapidly growing literature on backdoor attacks and defenses in the...
PT-2025-36948
Name of the Vulnerable Software and Affected Versions: Calix GigaCenter ONT versions 844E, 844G, 844GE, 854GE, 812G, 813G, 818G Description: A privilege abuse issue exists in Calix GigaCenter ONT Broadcom SoC modules due to excessive privileges. Recommendations: Apply the necessary configuration...
Cross-site Scripting (XSS)
Overview @modelcontextprotocol/inspector-client is a Client-side application for the Model Context Protocol inspector Affected versions of this package are vulnerable to Cross-site Scripting XSS via the redirect URI parameter when connecting to an untrusted remote server. An attacker can execute...