AndSoft e-TMS command injection vulnerability

AndSoft e-TMS is a logistics management software from the Spanish company AndSoft. A command injection vulnerability exists in AndSoft e-TMS version v25.03, which originates from the incorrect operation of parameter m in file /clt/LOGINFRM.ASP, and could lead to an operating system command...

CVE-2025-59737: Improper Neutralization of Special Elements used in a Command

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMLXA.ASP'...

AndSoft e-TMS command injection vulnerability

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability, which is due to program misuse of parameter m in file /CLT/LOGINERRORFRM.ASP, and can be exploited by an attacker to execute operating system comman...

PT-2025-40357

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is exploitable by sending a POST...

PT-2025-40418

🚨 SUSE Security Alert: CVE-2024-52766 Critical patch for Warewulf4 on SUSE Linux SUSE-2025-03448-1. A file server flaw exposes HPC clusters to unauthorized file access. Read more: 👉 https://t.co/VXWwCN1yYX Security https://t.co/VmY3P4ZnYY...

AndSoft e-TMS command injection vulnerability

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of the parameter m in the file /clt/LOGINFRMCAT.ASP, which can be exploited by an attacker to execute operating system...

PT-2025-40360

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST...

PT-2025-40359

Name of the Vulnerable Software and Affected Versions AndSoft's e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft's e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is exploitable by sending a PO...

PT-2025-40355

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST...

PT-2025-40356

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft's e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is triggered by sending a POST...

Cisco IOS XR Software Management Interface ACL Bypass (cisco-sa-acl-packetio-Swjhhbtz)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Photon OS 5.0: Coredns PHSA-2025-5.0-0623

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0623. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

CVE-2025-30247

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

PT-2025-39998

Name of the Vulnerable Software and Affected Versions Acronis True Image macOS versions prior to build 42389 Acronis True Image for SanDisk macOS versions prior to build 42198 Acronis True Image for Western Digital macOS versions prior to build 42197 Description An insecure XPC service...

Important Photon OS Security Update - PHSA-2025-4.0-0879

Updates of 'openvswitch' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-92-0631

Updates of 'open-vm-tools' packages of Photon OS have been released...

CVE-2025-30247

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

CVE-2025-43400

An out-of-bounds write vulnerability exists in the FontParser component of several Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The root cause is a lack of proper bounds checking when processing a maliciously crafted font . Successful exploitation can lead ...