Lucene search
+L

3253 matches found

Cvelist
Cvelist
•added 2025/10/22 2:21 p.m.•34 views

CVE-2016-15048 AMTT HiBOS Command Injection RCE via server_ping.php

AMTT Hotel Broadband Operation System HiBOS contains an unauthenticated command injection vulnerability in the /manager/radius/serverping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An...

10CVSS0.07357EPSS
SaveExploits2References5
CVE
CVE
•added 2025/10/22 2:21 p.m.•48 views

CVE-2016-15048

AMTT Hotel Broadband Operation System (HiBOS) is affected by an unauthenticated command injection in /manager/radius/server_ping.php. The code builds a shell command including the user-supplied ip parameter and executes it without proper validation or escaping, allowing an attacker to inject shel...

10CVSS6.4AI score0.07357EPSS
SaveIn wildExploits2References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:21 p.m.•20 views

CVE-2016-15048 AMTT HiBOS Command Injection RCE via server_ping.php

AMTT Hotel Broadband Operation System HiBOS contains an unauthenticated command injection vulnerability in the /manager/radius/serverping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An...

10CVSS6.4AI score0.07357EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
•added 2025/10/18 2:31 a.m.•13 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS6.1AI score0.00579EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/17 3:15 a.m.•10 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS0.00579EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/17 2:25 a.m.•18 views

EUVD-2025-34847

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

9.9CVSS6.9AI score0.00656EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/17 2:25 a.m.•32 views

CVE-2025-6894

CVE-2025-6894 is a documented API authorization flaw in Moxa network security appliances/routers that allows a low-privileged, authenticated user to execute an administrative ping, potentially enabling internal network reconnaissance and limited impact to device confidentiality/availability. Rela...

5.3CVSS6.9AI score0.00579EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/17 2:25 a.m.•25 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS0.00579EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/17 2:25 a.m.•7 views

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS6.9AI score0.00579EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/17 12:00 a.m.•7 views

CVE-2025-6894: Execution with Unnecessary Privileges

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

5.3CVSS6.1AI score0.00579EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/10/16 7:51 a.m.•12 views

Malicious Package

Overview vite-plugin-react-ping is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS6.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•2 views

PT-2025-42575

Name of the Vulnerable Software and Affected Versions Moxa network security appliances and routers affected versions not specified Description A flaw in the API authorization logic allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted to...

5.5CVSS6.1AI score0.00579EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2025/10/14 12:00 a.m.•16 views

The vulnerability of the ping6() function in D-Link DSL-7740C router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the ping6 function in the microprogramming software of the D-Link DSL-7740C router is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

9CVSS6.1AI score0.02098EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/10/09 12:00 a.m.•16 views

AlmaLinux 10 : iputils (ALSA-2025:9421)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:9421 advisory. iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping CVE-2025-47268 Tenable has extracted the preceding description block directly from th...

6.5CVSS6.9AI score0.01745EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/10/08 2:13 p.m.•17 views

CVE-2025-54400

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

8.8CVSS7.5AI score0.00733EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2025/10/08 12:32 p.m.•16 views

iputils: iputils integer overflow

An integer overflow flaw has been discovered in the ping function within the iputils package. This overflow may allow an attacker to craft an ECHO reply which can prevent iputils from operating normally...

6.5CVSS6.8AI score0.00354EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2025/10/08 12:24 p.m.•17 views

iputils: iputils integer overflow

An integer overflow flaw has been discovered in the ping function within the iputils package. This overflow may allow an attacker to craft an ECHO reply which can prevent iputils from operating normally...

6.5CVSS6.8AI score0.00354EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2025/10/08 11:42 a.m.•15 views

iputils: iputils integer overflow

An integer overflow flaw has been discovered in the ping function within the iputils package. This overflow may allow an attacker to craft an ECHO reply which can prevent iputils from operating normally...

6.5CVSS6.8AI score0.00354EPSS
SaveExploits0References8
Oracle linux
Oracle linux
•added 2025/10/08 12:00 a.m.•16 views

iputils security update

20210202-11.0.1.3 - Upstream backport 'ping: Add SARESTART to saflags' Orabug: 34573399 20210202-11.3 - Bump release 20210202-11.2 - Fix CVE-2025-48964 iputils: iputils integer overflow RHEL-112001 20210202-11.1 - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in...

6.5CVSS7AI score0.01745EPSS
SaveExploits1
OSV
OSV
•added 2025/10/08 12:00 a.m.•10 views

ALSA-2025:17558 Moderate: iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: iputils integer overflow CVE-2025-48964 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE...

6.5CVSS7.1AI score0.00354EPSS
SaveExploits0References4
Rows per page
Query Builder