IBM Power Hardware Management Console 路径遍历漏洞

The IBM Power Hardware Management Console HMC is a suite of graphical interface software from International Business Machines IBM for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A path traversal vulnerability exis...

CVE-2024-56477: Improper Limitation of a Pathname to a Restricted Directory

IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

IBM i 代码问题漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A code issue vulnerability exists in IBM i that stems from bypassing database feature limitation checks. A privileged bad actor could delete or otherwise affect databas...

PT-2025-6726 · Ibm · Ibm Hardware Management Console

Name of the Vulnerable Software and Affected Versions: IBM Power Hardware Management Console version 10.3.1050.0 Description: The issue allows an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to...

CVE-2025-24861 Outback Power Mojave Inverter Command Injection

An attacker may inject commands via specially-crafted post requests...

CVE-2025-24861

CVE-2025-24861 concerns the Outback Power Mojave Inverter. The connected documents confirm a vulnerability that could allow an attacker to inject commands via specially-crafted POST requests to the device. The CVE notes a command injection issue; additional sources describe risk context in ICS ad...

CVE-2025-24861 Outback Power Mojave Inverter Command Injection

An attacker may inject commands via specially-crafted post requests...

CVE-2025-25281 Outback Power Mojave Inverter Exposure of Sensitive Information to an Unauthorized Actor

An attacker may modify the URL to discover sensitive information about the target network...

CVE-2025-25281

The CVE-2025-25281 issue affects Outback Power Mojave Inverter. The vulnerability arises from the inverter’s handling of requests that allow URL manipulation to reveal sensitive network information, and there is also a post request path that could enable command injection. The root cause is the e...

CVE-2025-25281 Outback Power Mojave Inverter Exposure of Sensitive Information to an Unauthorized Actor

An attacker may modify the URL to discover sensitive information about the target network...

CVE-2025-26473

The CVE-2025-26473 entry concerns Outback Power Mojave Inverter. The vulnerability arises from using GET requests to access sensitive information (sensitive data exposed in query strings), enabling an attacker to retrieve confidential data via URL manipulation. The issue is documented across mult...

CVE-2025-26473 Outback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings

The Mojave Inverter uses the GET method for sensitive information...

CISA Releases Twenty Industrial Control Systems Advisories

CISA released twenty Industrial Control Systems ICS advisories on February 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-044-01 Siemens SIMATIC S7-1200 CPU Family ICSA-25-044-02 Siemens SIMATIC...

Outback Power Mojave Inverter

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data or inject commands. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Disable un-used...

PT-2025-7065

Name of the Vulnerable Software and Affected Versions: Outback Power - Mojave Inverter versions all Description: An attacker may modify the URL to discover sensitive information about the target network. Recommendations: For all versions, consider restricting access to sensitive network informati...

Outback Power Mojave Inverter 安全漏洞

Outback Power Mojave Inverter is an AC inverter from Outback Power. A security vulnerability exists in the Outback Power Mojave Inverter that originates from the ability to obtain sensitive information using the GET method...

Outback Power Mojave Inverter 命令注入漏洞

The Outback Power Mojave Inverter is an AC inverter from Outback Power. A command injection vulnerability exists in the Outback Power Mojave Inverter, which stems from the fact that an attacker could inject commands via a specially crafted post request...

PT-2025-7039

Name of the Vulnerable Software and Affected Versions: Outback Power - Mojave Inverter versions all Description: An attacker may inject commands via specially-crafted post requests. Recommendations: For all versions, consider restricting access to the post request functionality until a patch is...

Outback Power Mojave Inverter 信息泄露漏洞

The Outback Power Mojave Inverter is an AC inverter from Outback Power. An information disclosure vulnerability exists in the Outback Power Mojave Inverter that stems from the possibility that an attacker could modify the URL to discover sensitive information about the target network...

CVE-2024-12547

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...