Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:22 a.m.1 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS6.9AI score0.00386EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/10 12:28 a.m.3 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS7.5AI score0.00228EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/09 9:31 p.m.3 views

EUVD-2025-202318

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

7AI score0.00228EPSS
Exploits1References4
NVD
NVD
added 2025/12/09 7:15 p.m.4 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS0.00228EPSS
Exploits1References3
OSV
OSV
added 2025/12/09 7:15 p.m.3 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

9.8CVSS7.5AI score
Exploits0References3
CVE
CVE
added 2025/12/09 12:0 a.m.34 views

CVE-2025-65882

OpenMPTCProuter flaw CVE-2025-65882 affects versions up to 0.64. The issue is located in common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c, in function create_xor_ipad_opad, potentially allowing an attacker to write arbitrary files or execute arbitrary commands. Documented impact is ...

9.8CVSS7.2AI score0.00228EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 12:0 a.m.3 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

7.2AI score0.00228EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

OpenMPTCProuter 安全漏洞

OpenMPTCProuter is a TCP Internet connection software by the individual developer Ycarus Yannick Chabanois. A security vulnerability exists in OpenMPTCProuter version 0.64 and earlier versions, which originates from the possibility of writing arbitrary files or executing arbitrary commands...

9.8CVSS6.7AI score0.00228EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/09 12:0 a.m.17 views

CVE-2025-65882

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function createxoripadopad allowing attackers to potentially write arbitrary files or execute arbitrary commands...

0.00228EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.3 views

PT-2025-50216

Name of the Vulnerable Software and Affected Versions openmptcprouter versions through 0.64 Description An issue exists in openmptcprouter through version 0.64, specifically within the file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c and the create xor ipad opad function. This...

9.8CVSS6.9AI score0.00228EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-18157

Malware in sbrugna...

5.9CVSS5.9AI score0.00386EPSS
Exploits1References5
CNVD
CNVD
added 2021/06/24 12:0 a.m.4 views

openmptcprouter-vps-admin authorization issue vulnerability

openmptcprouter-vps-admin is an application. An OpenMPTCProuter API is based on FastAPI. A security vulnerability in Omr-admin.py in openmptcprouter-vps-admin version 0.57.3 and earlier can be exploited by remote attackers to guess passwords via a timing attack...

5.9CVSS6.9AI score0.00386EPSS
Exploits1References1
OSV
OSV
added 2021/05/06 1:15 p.m.7 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS7.1AI score0.00386EPSS
Exploits1References4
NVD
NVD
added 2021/05/06 1:15 p.m.11 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

5.9CVSS0.00386EPSS
Exploits1References4
Prion
Prion
added 2021/05/06 1:15 p.m.10 views

Design/Logic Flaw

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

4.3CVSS5.8AI score0.00386EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2021/05/06 11:45 a.m.12 views

CVE-2021-31245

omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack...

6AI score0.00386EPSS
Exploits1References4
CVE
CVE
added 2021/05/06 11:45 a.m.31 views

CVE-2021-31245

CVE-2021-31245 affects openmptcprouter-vps-admin 0.57.3 and earlier. The issue is a timing-based password comparison in omr-admin.py that compares the user-supplied password with the original password in a length-dependent way, enabling remote attackers to guess the password through timing observ...

5.9CVSS5.7AI score0.00386EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2021/05/06 12:0 a.m.1 views

openmptcprouter-vps-admin 授权问题漏洞

openmptcprouter-vps-admin is an application. An OpenMPTCProuter API is based on FastAPI. A security vulnerability in Omr-admin.py in openmptcprouter-vps-admin version 0.57.3 and earlier can be exploited by remote attackers to guess passwords via a timing attack...

5.9CVSS5.7AI score0.00386EPSS
Exploits1References4
Rows per page
Query Builder