Lucene search
+L

55 matches found

CVE
CVE
added 2025/12/15 4:02 a.m.27 views

CVE-2025-14703

CVE-2025-14703 affects Shiguangwu sgwbox N3 (version 2.0.25). The vulnerability is in an unknown function under /fsnotify, in the POST Message Handler, where manipulation of the token argument leads to improper authentication. It can be exploited remotely and the exploit has been publicly disclos...

6.9CVSS6.4AI score0.00689EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2025/12/15 4:02 a.m.8 views

EUVD-2025-203325

A vulnerability has been found in Shiguangwu sgwbox N3 2.0.25. The affected element is an unknown function of the file /fsnotify of the component POST Message Handler. The manipulation of the argument token leads to improper authentication. It is possible to initiate the attack remotely. The...

6.9CVSS6.2AI score0.00689EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.11 views

SGWBox N3 安全漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A security vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter params in the file /usr/sbin/httpeshellserver, which could result in a buffer overflow...

10CVSS9.7AI score0.05852EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.13 views

PT-2025-51193

A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilize...

10CVSS6.9AI score0.16504EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.16 views

PT-2025-51208

A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http eshell server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation...

10CVSS6.7AI score0.05852EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.12 views

SGWBox N3 授权问题漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. An authorization issue vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter token in the file/fsnotify, which could lead to improper authentication...

6.9CVSS5.5AI score0.00689EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.6 views

SGWBox N3 路径遍历漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A path traversal vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the file/eshell and could lead to path traversal...

9.8CVSS7.4AI score0.12488EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.15 views

PT-2025-51191

A vulnerability has been found in Shiguangwu sgwbox N3 2.0.25. The affected element is an unknown function of the file /fsnotify of the component POST Message Handler. The manipulation of the argument token leads to improper authentication. It is possible to initiate the attack remotely. The...

6.9CVSS6.7AI score0.00689EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.9 views

SGWBox N3 命令注入漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A command injection vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter params in the component SHARESERVER Feature, which could lead to command injection...

10CVSS9.6AI score0.16504EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.11 views

PT-2025-51202

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25 Description A buffer overflow weakness exists in the file /usr/sbin/http eshell server of the WIREDCFGGET Interface component. Manipulation of the params argument can trigger this issue, potentially allowing...

10CVSS9.8AI score0.0647EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.10 views

PT-2025-51201

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25 Description A security flaw exists in Shiguangwu sgwbox N3 2.0.25 within the DOCKER Feature. Manipulation of the params argument in an unknown function of the file /usr/sbin/http eshell server can lead to...

10CVSS9.3AI score0.18615EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.10 views

SGWBox N3 命令注入漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A command injection vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter params in the file /usr/sbin/httpeshellserver, which could lead to command injection...

10CVSS9.6AI score0.18615EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

SGWBox N3 安全漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A security vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter params in the file /usr/sbin/httpeshellserver, which could result in a buffer overflow...

10CVSS9.7AI score0.0647EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

SGWBox N3 命令注入漏洞

SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A command injection vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter params in the file /usr/sbin/httpeshellserver, which could lead to command injection...

10CVSS9.6AI score0.18615EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.12 views

PT-2025-51195

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25 Description A command injection issue exists in the NETREBOOT Interface component of the software. This manipulation can be launched remotely and allows for command execution. The vulnerable file is located ...

10CVSS9.6AI score0.18615EPSS
SaveExploits1References13
Rows per page
Query Builder