Linux Distros Unpatched Vulnerability : CVE-2009-0801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access...

openSUSE Security Advisory (SUSE-SU-2025:0226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Path Traversal in Grafana

CVE-2021-43798-Exploit-for-Windows-and-Linux Modified exploit...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2025:0168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Schneider Electric PowerLogic HDPM6000 安全漏洞

The Schneider Electric PowerLogic HDPM6000 is a high-density metering system from Schneider Electric France. A security vulnerability exists in the Schneider Electric PowerLogic HDPM6000 that stems from the inclusion of an authorization bypass via user control key vulnerability that could allow a...

PT-2024-16532 · Device · Device

Name of the Vulnerable Software and Affected Versions: Device affected versions not specified Description: The issue arises from unvalidated firmware updates, allowing an attacker to install modified firmware on the device. This has a significant impact on availability, integrity, and...

SICK InspectorP61x和SICK InspectorP62x 安全漏洞

The SICK InspectorP61x and SICK InspectorP62x are both ultra-compact industrial 2D vision sensors from SICK, Germany. A security vulnerability exists in the SICK InspectorP61x version prior to 5.0.0 and InspectorP62x version prior to 5.0.0, which stems from an unverified firmware update that allo...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156-without-ip-command fork of worawit/CVE-2021-315...

PT-2024-10218 · Schneider Electric · Schneider Electric Powerlogic Hdpm6000

Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 version 0.62.7 Description: The issue is related to an authorization bypass vulnerability that could allow an authorized attacker to modify values outside those defined by their privileges, potentially...

CVE-2024-25282

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2024-25283

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2024-25282

The 3DSecure 2.0 product, specifically the 3DS Method Authentication component, is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper sanitization or validation of the base64-encoded params parameter during a /rest/online request containing a /redirect?action=challenge&txn=...

CVE-2024-25282

...

CVE-2024-25286

CVE-2024-25286 concerns a CSRF vulnerability in the 3DSecure 2.0 system, specifically the “3DS Authorization Method” of Redsys (3DSecure 2.0). The issue allows an attacker to submit unauthorized form data by manipulating HTTP Origin and Referer headers, potentially triggering unauthorized transac...

CVE-2024-7206

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

CVE-2024-7206

CVE-2024-7206 corresponds to a vulnerability in eWeLink hardware where SSL pinning can be bypassed. The connected sources indicate that a local attacker can decrypt TLS communications and extract secrets to clone the device by flashing modified firmware. The CNNVD entry specifies the vulnerabilit...

CVE-2024-7206: Improper Certificate Validation

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

PT-2024-39452 · Oct8Ne · Oct8Ne

Name of the Vulnerable Software and Affected Versions: Oct8ne affected versions not specified Description: The issue is related to a Cross-Site Scripting XSS flaw in the Oct8ne system, which could allow an attacker to embed harmful JavaScript code into the body of a chat message. This manipulatio...