CVE-2025-21443 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Automotive Vehicle Networks

Memory corruption while processing message content in eAVB...

CVE-2025-21443

The CVE-2025-21443 entry concerns memory corruption in eAVB when processing message content, affecting Qualcomm automotive chipsets. Technical details across connected sources align on a buffer-copy/size-check vulnerability in the eAVB processing path, leading to high-severity impact (CVE metrics...

CVE-2025-21442 Integer Overflow to Buffer Overflow in Automotive Vehicle Networks

Memory corruption while transmitting packet mapping information with invalid header payload size...

CVE-2025-21442 Integer Overflow to Buffer Overflow in Automotive Vehicle Networks

Memory corruption while transmitting packet mapping information with invalid header payload size...

CVE-2025-21442

CVE-2025-21442 concerns Qualcomm chipsets experiencing memory corruption when transmitting packet mapping information with an invalid header payload size. The vulnerability is described as a memory corruption issue in the handling of header payload sizing during packet mapping transmission. The C...

📄 Palo Alto Networks Expedition 1.2.90.1 Privilege Escalation

Palo Alto Networks Expedition version 1.2.90.1 proof of concept exploit that allows for an administrative password reset. - Exploit Title: PoC for Admin Account Password Reset of Palo Alto Networks Expedition tool - Shodan Dork: html:"expedition project" - FOFA Dork: "expedition project" &&...

F5 Networks BIG-IP : Python vulnerability (K000150749)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000150749 advisory. The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as...

Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover

Exploit Title: Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover Shodan Dork: html:"expedition project" FOFA Dork: "expedition project" && iconhash="1499876150" Exploit Author: ByteHunter Email: [email protected] Vulnerable Versions: 1.2 1.2.92 Tested on: 1.2.90.1 & 1.2.75 CVE ...

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS allows a perpetrator to execute arbitrary commands.

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS relates to the failure to neutralize data in XPath expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Layer 2 Address Learning Daemon (L2ALD) in Juniper Networks’ Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS Evolved operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2025-3031

creationtimestamp| type| source ---|---|--- 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839 2025-04-01 13:00:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114262832435614839...

Rockwell Automation Lifecycle Services with Veeam Backup and Replication

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

Digital China Networks DCME-520 安全漏洞

Digital China Networks DCME-520 DCN DCME-520 is a new generation high-performance security gateway with multi-core high performance from Digital China Networks DCN, China. It has excellent performance and powerful data processing capabilities. A security vulnerability exists in Digital China...

F5 Networks BIG-IP : AngularJS XSS vulnerability (K32412075)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K32412075 advisory. angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code...

CVE-2025-23632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

CVE-2025-23632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

CVE-2025-23632

CVE-2025-23632 affects the WordPress CG Button plugin (Rhizome Networks) up to version 1.0.5.6. It is a Reflected XSS caused by improper input neutralization during web page generation. Exploitation is possible remotely (network access) and requires user interaction. Current connected sources ind...

CVE-2025-23632 WordPress CG Button plugin <= 1.0.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

Hitachi Energy TRMTracker

SUMMARY Hitachi Energy is aware of the multiple vulnerabilities that affect the TRMTracker product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality and integrity impacts. Please refer to the Recommended Immediate Actions for...

SUSE SLES12 Security Update : docker (SUSE-SU-2025:0992-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0992-1 advisory. Update to Docker 27.5.1-ce bsc1237335: - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration bsc1234089...