CVE-2025-41451

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

PT-2025-34328 · Danfoss · Ak-Sm8Xxa

Name of the Vulnerable Software and Affected Versions: Danfoss AK-SM8xxA Series versions prior to 4.3.1 Description: A post-authenticated external control of system web interface configuration setting issue exists. This could allow for a denial of service attack due to improper handling of...

OSNEXUS QuantaStor v4 Virtual Appliance Information Disclosure Vulnerability

OSNEXUS QuantaStor v4 virtual appliance is a virtual storage appliance from OSNEXUS USA. An information disclosure vulnerability exists in OSNEXUS QuantaStor v4 virtual appliance versions prior to 4.3.1. The vulnerability can be exploited by an attacker to enumerate valid accounts on a system by...