Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

CVE-2026-103582

A flaw was found in Apache NMS ActiveMQ. The OpenWire protocol parsing component does not properly validate incoming frame sizes or verify that decoded length fields fit within the received frame. A malicious or compromised broker, or an attacker capable of modifying unencrypted network traffic,...

CVE-2026-103582: Apache Software Foundation Apache ActiveMQ NMS OpenWire Client Library: Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package…

Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ the .NET OpenWire client, package Apache.NMS.ActiveMQ before 2.3.0. The OpenWire unmarshalling code trusted the frame size and the length and count fields read from the network. It did not enforce a maximum frame...

CLEANSTART-2024-CV60973 NETSAS Enigma NMS 65

Security vulnerability affects the elfutils package. NETSAS Enigma NMS 65...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026

Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution and other security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026

Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security vulnerabilities. IBM SevOne...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component including Streaming Telemetry with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security...

CVE-2026-73440 Security Advisory 0178

On affected platforms running Arista EOS with Simple Network Management Protocol SNMP configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to thi...

CVE-2026-83342

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...

Malware in nms-dashboard-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nms-dashboard-js (npm)

Source: amazon-inspector ab87107c47e765b4214ccd31eac720d9d082b0cb5040d8acf90c8af00db5a601 [email protected] declares an npm install lifecycle hook scripts.install: "node index.js" that unconditionally requires ./lib/core inside a swallow-all try/catch. The loaded code reads...

Malicious code in nms-dashboard-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab87107c47e765b4214ccd31eac720d9d082b0cb5040d8acf90c8af00db5a601 [email protected] declares an npm install lifecycle hook scripts.install: "node index.js" that unconditionally requires ./lib/core inside a...

MAL-2026-13451 Malicious code in nms-dashboard-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab87107c47e765b4214ccd31eac720d9d082b0cb5040d8acf90c8af00db5a601 [email protected] declares an npm install lifecycle hook scripts.install: "node index.js" that unconditionally requires ./lib/core inside a...

Enigma NMS - Detection

Detects Enigma NMS - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Enigma NMS - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Enigma NMS - Detection', 'description': 'Detects Enigma NMS...

SevOne NMS Network Manager Detection

Detects SevOne NMS Network Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SevOne NMS Network Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SevOne NMS Network Manager Detection', 'description...

LG-Ericsson iPECS NMS 30M - Local File Inclusion Detection

Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=../ URIs. !/usr/bin/env python3 -- coding: utf-8 -- """Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=.""" import re from kittysploit import from lib.protocols.http.httpclien...

CVE-2026-24032

A vulnerability has been identified in SINEC NMS All versions V4.0 SP3 with UMC. The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain...

SINEC NMS User Management Component Code Execution

The vulnerability of the User Management Component UMC in the SINEC NMS data transmission network management system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code using specially created DLL files...

Siemens SINEC NMS Cryptographic Signature Error Unauthorized Access

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...