Lucene search
+L

17 matches found

Positive Technologies
Positive Technologies
•added 2026/09/13 12:00 a.m.•21 views

PT-2026-90837

Name of the Vulnerable Software and Affected Versions Spug versions prior to 3.4.1 Description Authenticated users with monitor permissions can achieve remote code execution on the host system. The issue exists in the ping check function, which interpolates user-supplied monitor addresses directl...

8.8CVSS6.8AI score0.01318EPSS
SaveExploits0References16
OSV
OSV
•added 2026/04/01 9:24 a.m.•8 views

OPENSUSE-SU-2026:20452-1 Security update for kea

This update for kea fixes the following issues: Update to 3.0.3: - CVE-2025-11232: invalid characters cause assert bsc1252863. - CVE-2026-3608: stack overflow via maliciously crafted message bsc1260380. Changelog: A large number of bracket pairs in a JSON payload directed to any endpoint would...

7.5CVSS7.2AI score0.01162EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/01 9:22 a.m.•24 views

SUSE-SU-2026:20989-1 Security update for kea

This update for kea fixes the following issues: Update to 3.0.3: - CVE-2025-11232: invalid characters cause assert bsc1252863. - CVE-2026-3608: stack overflow via maliciously crafted message bsc1260380. Changelog: A large number of bracket pairs in a JSON payload directed to any endpoint would...

7.5CVSS7.2AI score0.01162EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/02 1:15 p.m.•22 views

CVE-2025-11787

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS', 'CheckPing' and 'TraceRoute' functions...

8.8CVSS0.0101EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-37437

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.02785EPSS
SaveExploits2References1
RedHat Linux
RedHat Linux
•added 2025/04/28 12:20 a.m.•21 views

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...

7.5CVSS6.9AI score0.0159EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2023/12/17 11:30 a.m.•81 views

NetworkSherlock - Powerful And Flexible Port Scanning Tool With Shodan

NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, NetworkSherlock can efficiently scan IP ranges, CIDR blocks, and multiple targets. It stands out with its detailed banner grabbing...

7.1AI score
SaveExploits0References1
OSV
OSV
•added 2023/10/03 9:15 p.m.•16 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.8CVSS5.8AI score0.02785EPSS
SaveExploits2References1
NVD
NVD
•added 2023/10/03 9:15 p.m.•36 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.8CVSS9.7AI score0.02785EPSS
SaveExploits2References1
Prion
Prion
•added 2023/10/03 9:15 p.m.•26 views

Command injection

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

7.5CVSS9.6AI score0.02785EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•17 views

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the ip parameter in the Ping check function being susceptible to operating system command injection...

9.8CVSS7.4AI score0.02785EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2023/10/03 12:00 a.m.•19 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

7.4AI score0.02785EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/10/03 12:00 a.m.•46 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.9AI score0.02785EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/03 12:00 a.m.•4 views

CVE-2023-33272: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.8CVSS8.2AI score0.02785EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/10/03 12:00 a.m.•2 views

PT-2023-24257

Name of the Vulnerable Software and Affected Versions DTS Monitoring version 3.57.0 Description An issue was discovered in the software where the ip parameter within the Ping check function is vulnerable to OS command injection, specifically blind command injection. Recommendations For DTS...

9.8CVSS5.8AI score0.02785EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2022/06/06 3:54 p.m.•24 views

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...

7.5CVSS6.9AI score0.0159EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/03/22 12:00 a.m.•16 views

PT-2022-17713 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7570 B20200620 Description: A command injection issue was found via the pingCheck function, allowing for potential exploitation. Recommendations: For TOTOLINK N600R version 4.3.0cu.7570 B20200620, consider...

9.8CVSS7.5AI score0.19579EPSS
SaveExploits1References5
Rows per page
Query Builder