Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:55 a.m.•40 views

CVE-2025-65212

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

9.8CVSS7.1AI score0.05362EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/06 4:15 p.m.•25 views

CVE-2025-65212

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

9.8CVSS5.8AI score0.05362EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/06 12:00 a.m.•3 views

CVE-2025-65212: Reliance on Cookies without Validation and Integrity Checking

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

9.8CVSS5.9AI score0.05362EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/06 12:00 a.m.•72 views

CVE-2025-65212

The NJHYST HY511 POE core (versions prior to 2.1 ) and plugins (versions prior to 0.1 ) are vulnerable to an issue stemming from insufficient cookie verification . An unauthenticated attacker can directly request and download the core configuration file, which contains a username and a self-decry...

9.8CVSS5.9AI score0.05362EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/01/06 12:00 a.m.•90 views

CVE-2025-65212

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

0.05362EPSS
SaveExploits1References2
Rows per page
Query Builder