CVE-2025-54539

Apache ActiveMQ NMS AMQP Client (vulnerable up to 2.3.0) suffers Deserialization of Untrusted Data due to unbounded deserialization logic when connecting to untrusted AMQP servers. Malicious responses could lead to arbitrary code execution on the client side; a 2.1.0 deserialization restriction v...

CVE-2025-40755

A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...

CVE-2025-40755

A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...

CVE-2025-40755

CVE-2025-40755 affects Siemens SINEC NMS prior to v4.0 SP1. The getTotalAndFilterCounts endpoint is vulnerable to SQL injection, enabling an authenticated low-priv attacker to insert data and escalate privileges. A fix is available in v4.0 SP1 or later (per PT-2025-41881; Siemens ProductCERT advi...

EUVD-2025-34162

A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...

CVE-2025-40755

A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...

CVE-2025-40755

A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...

Siemens SINEC NMS SQL注入漏洞

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage, and configure industrial networks with tens of thousands of devices, including safety-related areas. A SQL injection vulnerability exists in Siemens SINEC NMS versions...

PT-2025-41881

Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 4.0 SP1 Description A SQL injection issue exists in SINEC NMS. The vulnerability is present in the getTotalAndFilterCounts API endpoint. An authenticated attacker with low privileges can exploit this to insert data,...

Siemens SINEC NMS

SUMMARY SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. 2...

EUVD-2021-20402

Malware in sbrugna...

EUVD-2021-20404

Malware in sbrugna...

EUVD-2020-17927

Malware in sbrugna...

EUVD-2021-20399

Malware in sbrugna...

EUVD-2016-6026

Malware in sbrugna...

EUVD-2021-20401

Malware in sbrugna...

EUVD-2021-20411

Malware in sbrugna...

EUVD-2020-3069

Malware in sbrugna...

EUVD-2020-3065

Malware in sbrugna...

EUVD-2018-2360

Malware in sbrugna...