Hikvision Springboot Env Actuator - Detect

The HIKVISION comprehensive security management platform has information leakage vulnerabilities, through which attackers can obtain sensitive information such as environment env for further attacks !/usr/bin/env python3 -- coding: utf-8 -- """The HIKVISION comprehensive security management...

Tanium Server security vulnerabilities

Tanium Server is a security management platform developed by the American company Tanium. Tanium Server has a security vulnerability, which stems from a denial-of-service vulnerability...

CVE-2025-34067: Deserialization of Untrusted Data

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...

Command Execution Vulnerability in Hikvision Integrated Security Management Platform of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a technology company that focuses on technological innovation. Command execution vulnerability exists in the Hikvision Integrated Security Management Platform of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by an attacker...

H3C SecCenter SMP-E1114P02: Path traversal vulnerability

H3C SecCenter SMP-E1114P02 is a security management platform from China's Xinhua San H3C. A path traversal vulnerability exists in H3C SecCenter SMP-E1114P02 20250513 and earlier versions, which stems from path traversal due to incorrect operation of the parameter Name in the file...

Siemens Siveillance Control Authorization Bypass Vulnerability

Siemens Siveillance Control is a security management platform from Siemens that integrates video surveillance, access control, intrusion detection and other functions to help organizations achieve comprehensive monitoring and management of buildings, facilities and people. An authorization bypass...

Trellix ePolicy Orchestrator cross-site scripting vulnerability

Trellix ePolicy Orchestrator is a centralized security management platform from Trellix. A security vulnerability exists in Trellix ePolicy Orchestrator. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

F5 BIG-IP Code Issue Vulnerabilities

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IP has a code issue vulnerability that can be exploited by attackers to cause a denial of service on the BIG-IP system...

Fortinet FortiManager Licensing Issue Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and...

Command Execution Vulnerability in NetGuard Security Management Platform of Beijing NetGuard Nebula Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

AlienVault OSSIM and USM Remote Command Execution Vulnerabilities

AlienVault OSSIM and USM are both products of AlienVault Corporation, U.S.A. OSSIM is an open source security information management system. USM is a security management platform that provides security monitoring, security event management and reporting, and threat awareness system. A remote...