378 matches found
PT-2025-29234
Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RB firmware versions 8.54 Description: A hidden remote support feature, protected by a static secret, allows an authenticated attacker to execute arbitrary OS commands with root privileges. Recommendations: At the moment, there i...
WordPress plugin Premium Age Verification Restriction for WordPress 信任管理问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A trust management issue vulnerability exis...
The vulnerability of the software for remote IT support and monitoring of Dell Secure Connect Gateway (SCG) arises from the lack of proper input validation when requesting external server authentication. This allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of software for remote IT support and monitoring of Dell Secure Connect Gateway SCG lies in the lack of proper input validation when requesting external server authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...
The vulnerability of the Live-Restore parameter in software for remote IT support and monitoring of Dell Secure Connect Gateway (SCG) allows a hacker to circumvent existing security restrictions.
The vulnerability of the Live-Restore parameter in software for remote IT support and monitoring of Dell Secure Connect Gateway SCG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions...
CVE-2025-37099
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37098
A path traversal vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37097
A vulnerability in HPE Insight Remote Support IRS prior to v7.15.0.646 may allow an unauthenticated denial of service...
CVE-2025-37099
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37099
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37099
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37099
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37099
A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37099
HPE Insight Remote Support (IRS) before v7.15.0.646 has a directory traversal flaw in the processAttachmentDataStream that enables remote code execution with SYSTEM privileges. Exploitation is possible remotely and without authentication. Remediation exists in IRS v7.15.0.646 or later.
CVE-2025-37098
A path traversal vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37098
A path traversal vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37098
CVE-2025-37098 documents a path traversal vulnerability in HPE Insight Remote Support (IRS) , affecting versions prior to 7.15.0.646 . The vulnerability arises from improper handling of file paths, enabling an attacker to access restricted files via crafted input. Impact is described as high with...
CVE-2025-37098
A path traversal vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...
CVE-2025-37098
A path traversal vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...