Rockwell Automation Stratix IOS security vulnerabilities

Rockwell Automation Stratix IOS is an industrial operating system from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Stratix IOS that originates from an unverified upload of a malicious configuration that could lead to remote code execution...

Schneider Electric Saitel DR RTU operating system command injection vulnerability

The Schneider Electric Saitel DR RTU is a remote terminal device from Schneider Electric France. The Schneider Electric Saitel DR RTU suffers from an operating system command injection vulnerability that stems from improper neutralization of operating system commands, which could lead to command...

Tautulli operating system command injection vulnerability

Tautulli is a Tautulli open source application for monitoring Plex Media Server Media Server. An operating system command injection vulnerability exists in Tautulli 2.15.3 and earlier versions, which stems from a command injection vulnerability that could lead to remote code execution...

Microsoft Windows Resource Management Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...

Photon OS 5.0: Libsoup PHSA-2025-5.0-0614

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0614. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Adobe Premiere Pro < 24.6.8 / 25.0 < 25.4 Arbitrary code execution (APSB25-87) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 24.6.8, 25.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-87 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-54242 Note that Nessus has not...

Schneider Electric Saitel DR RTU operating system command injection vulnerability

The Schneider Electric Saitel DR RTU is a remote terminal device from Schneider Electric France. The Schneider Electric Saitel DR RTU suffers from an operating system command injection vulnerability that stems from improper neutralization of special elements, which could lead to the execution of...

SAP NetWeaver code-related vulnerabilities

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A deserialization vulnerability exists in SAP NetWeaver, which arises from unsafe deserialization of...

PT-2025-36471

Name of the Vulnerable Software and Affected Versions: rsbi-os version 4.7 Description: rsbi-os version 4.7 is vulnerable to Remote Code Execution RCE in sqlite-jdbc. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Important Photon OS Security Update - PHSA-2025-5.0-0614

Updates of 'libsoup' packages of Photon OS have been released...

NVIDIA Cumulus Linux and NVIDIA NVOS Log Information Disclosure Vulnerability

NVIDIA Cumulus Linux is an open network operating system.NVIDIA NVOS is an operating system. A log information disclosure vulnerability exists in NVIDIA Cumulus Linux and NVIDIA NVOS. The vulnerability stems from a hash password that is not properly hidden in log files and can be exploited by an...

Important Photon OS Security Update - PHSA-2025-5.0-91-0614

Updates of 'libsoup' packages of Photon OS have been released...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

CVE-2021-26377

CVE-2021-26377 affects AMD Trusted OS (TOS) where insufficient parameter validation during process-space allocation can trigger an integer overflow, enabling a malicious userspace process to cause a denial of service. Affected products are tied to AMD Embedded Processors and related components; e...

CVE-2021-26377

Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...

CVE-2025-7388

It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...

Exploit for Use After Free in Microsoft

PoC exploit for CVE-2019-0708, a RCE vulnerability in Windows systems, including Windows 2003, Windows XP, Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2. The vulnerability occurs during pre-authorization and allows an attacker to run arbitrary malicious code in the NT...

PT-2025-36374

Name of the Vulnerable Software and Affected Versions: Trusted OS affected versions not specified Description: Insufficient parameter validation during process space allocation in the Trusted OS TOS can allow a malicious userspace process to trigger an integer overflow, potentially leading to a...

CVE-2025-47421

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead...

CVE-2025-55037

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...