887 matches found
EUVD-2025-34726
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the allow/deny lists mechanism when establishing connections to untrusted AMQP servers. An attacker can achieve arbitrary code execution by crafting malicious responses that exploit unbounded...
CVE-2025-54539
Apache ActiveMQ NMS AMQP Client (vulnerable up to 2.3.0) suffers Deserialization of Untrusted Data due to unbounded deserialization logic when connecting to untrusted AMQP servers. Malicious responses could lead to arbitrary code execution on the client side; a 2.1.0 deserialization restriction v...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
EUVD-2025-34162
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
A vulnerability has been identified in SINEC NMS All versions V4.0 SP1. Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. ZDI-CAN-26570...
CVE-2025-40755
CVE-2025-40755 affects Siemens SINEC NMS prior to v4.0 SP1. The getTotalAndFilterCounts endpoint is vulnerable to SQL injection, enabling an authenticated low-priv attacker to insert data and escalate privileges. A fix is available in v4.0 SP1 or later (per PT-2025-41881; Siemens ProductCERT advi...
PT-2025-41881
Name of the Vulnerable Software and Affected Versions SINEC NMS versions prior to 4.0 SP1 Description A SQL injection issue exists in SINEC NMS. The vulnerability is present in the getTotalAndFilterCounts API endpoint. An authenticated attacker with low privileges can exploit this to insert data,...
Siemens SINEC NMS SQL注入漏洞
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage, and configure industrial networks with tens of thousands of devices, including safety-related areas. A SQL injection vulnerability exists in Siemens SINEC NMS versions...
Siemens SINEC NMS
SUMMARY SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. 2...
EUVD-2020-3065
Malware in sbrugna...
EUVD-2021-20407
Malware in sbrugna...
EUVD-2020-17927
Malware in sbrugna...
EUVD-2020-3073
Malware in sbrugna...
EUVD-2019-6932
Malware in sbrugna...
EUVD-2019-6923
Malware in sbrugna...