Lucene search
+L

8 matches found

NVD
NVD
added yesterday5 views

CVE-2026-42933

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation...

10CVSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday17 views

CVE-2026-42933 Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation...

10CVSS
SaveExploits0References1
NVD
NVD
added 2026/05/05 4:16 p.m.48 views

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

8.6CVSS0.00516EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/05 2:15 p.m.7 views

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

8.6CVSS6.1AI score0.00516EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.14 views

PT-2026-39184

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.3.5 Description An authenticated user can perform Server-Side Request Forgery SSRF by creating a cluster node that points to an arbitrary internal URL and sending API requests with the X-Node-ID header. The Proxy...

9.9CVSS5.9AI score0.00318EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2022/09/27 12:0 a.m.5 views

PT-2022-6636 · Cisco · Cisco Wireless Lan Controller +1

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Access Points affected versions not specified Cisco Wireless LAN Controller WLC affected versions not specified Description: The issue is related to insufficient access control in the software of Cisco Aironet Access Points and...

4.7CVSS4.8AI score0.00249EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2022/08/16 12:30 p.m.52 views

VLANPWN - VLAN Attacks Toolkit

VLAN attacks toolkit DoubleTagging.py - This tool is designed to carry out a VLAN Hopping attack. As a result of injection of a frame with two 802.1Q tags, a test ICMP request will also be sent. DTPHijacking.py - A script for conducting a DTP Switch Spoofing/Hijacking attack. Sends a malicious...

7.5AI score
SaveExploits0References1
NVD
NVD
added 2005/12/21 2:3 a.m.14 views

CVE-2005-4440

The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags, which causes the second tag to be redirected from a downstream switch after the first tag has been stripped, as demonstrated by Yersinia, aka "double-tagging...

5CVSS6.6AI score0.01611EPSS
SaveExploits0References3
Rows per page
Query Builder