CVE-2021-36630

CVE-2021-36630 Ruckus的SmartZone系列设备存在安全风险。在通知厂商后，他们积极组织技术人员进行调查。在此期间，我们也多次提供安全建议和验证方法。7月19日，该公司正式发布了安全公告。 发送请求 攻击命令：echo "" | nc -4u ip:address 9001 IP地址示例：62.210.8.110?111.107.251.71（Ruckus Wireless SZ IP） 示例 受影响版本 SmartZone-100 - 全部 全部 - Virtual SmartZone 参考链接 http://ruckus.com...

CVE-2017-11610

LAB 3- CVE-2017-11610 I. SYSTEM ANALYSIS Identifying Attack Surface from the Docker Environment Starting with what is running in the environment. I list all active containers: root@kitploit: docker ps-a The victim exposes a single port:9001. Port 9001 is not a standard web app. Looking up the por...

CVE-2026-50189

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the container via a Caddy reverse-proxy route at /supervisor/ on the public ingress. Combined with the...

CVE-2026-50189

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the container via a Caddy reverse-proxy route at /supervisor/ on the public ingress. Combined with the...

EUVD-2026-39107

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the container via a Caddy reverse-proxy route at /supervisor/ on the public ingress. Combined with the...

CVE-2026-50189

Appsmith before version 2.1 is affected by a remote code execution via its bundled supervisord XML-RPC interface exposed on port 9001 and reachable through a Caddy route at /supervisor/. If an authenticated administrator accesses GET /api/v1/admin/env and obtains APPSMITH_SUPERVISOR_PASSWORD, the...

PT-2026-52103

Name of the Vulnerable Software and Affected Versions Appsmith versions prior to 2.1 Description The bundled supervisord exposes an XML-RPC interface on port 9001, which is accessible from outside the container through a Caddy reverse-proxy route at the '/supervisor/' endpoint. An authenticated...

(0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Operations Orchestration. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RSScheduler service JDBC component of Operations Orchestra which liste...

Buffer overflow

Buffer overflow in the lmtcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted request to port 9001...

Invensys Wonderware InBatch and Foxboro I/A Series Batch database lock manager service (lm_tcp) buffer overflow vulnerability

Overview The lmtcp service in Invensys Wonderware InBatch and Foxboro I/A Series Batch contains a buffer overflow vulnerability when coping string data into a buffer in a fixed structure. Description From the Invensys Wonderware website: "InBatch is powerful software that can be used in the most...

Wonderware InBatch Vulnerability

Overview An independent security researcher has published information to a vulnerability disclosure website regarding a buffer overflow vulnerability in the Wonderware InBatch and I/A Series Batch software products all supported versions. According to the researcher’s report, the service listenin...

HSQLDB Server Detection

The remote host is running HSQLDB, an open source database written in Java, and its database engine is listening on TCP port 9001 for network server database connections using JDBC. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20065; scriptversion"1.16";...

HP LaserJet LCD Display Modification

It may be possible to remotely change the printer's display text. Please check the printer display, and if it is set to 'Nessus' then the test succeeded. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10103;...