4753 matches found
Nexxt Solutions NCM-X1800 安全漏洞
The Nexxt Solutions NCM-X1800 is a router from Nexxt Solutions. A security vulnerability exists in the Nexxt Solutions NCM-X1800 UV1.2.7 and earlier versions, which stems from an authentication bypass that could lead to remote enablement of Telnet services...
CVE-2025-52378
Cross-Site Scripting XSS vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that is executed in the context of administrator sessions when viewing the device management page via the DEVICEALIAS parameter to the...
CVE-2025-52378
Cross-Site Scripting XSS vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject JavaScript code that is executed in the context of administrator sessions when viewing the device management page via the DEVICEALIAS parameter to the...
CVE-2025-52376
An authentication bypass vulnerability in the /web/umopentelnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an attacker to remotely enable the Telnet service without authentication, bypassing security controls. The Telnet server is then accessible wi...
Nexxt Solutions NCM-X1800 命令注入漏洞
The Nexxt Solutions NCM-X1800 is a router from Nexxt Solutions. A command injection vulnerability exists in the Nexxt Solutions NCM-X1800 UV1.2.7 and earlier versions, which stems from a command injection that could lead to the execution of arbitrary commands...
PT-2025-29565 · Nexxt Solutions · Nexxt Solutions Ncm-X1800 Mesh Router
Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router firmware versions prior to UV1.2.7 Description: Nexxt Solutions NCM-X1800 Mesh Router firmware contains an authenticated command injection issue in the firmware update feature. The /web/um fileName set.cg...
PT-2025-29559 · Nexxt Solutions · Ncm-X1800 Mesh Router
Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router firmware versions UV1.2.7 and below Description: An authentication bypass exists in the /web/um open telnet.cgi endpoint. This bypass allows an attacker to remotely enable the Telnet service without...
CVE-2025-52377
Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary commands on the device. The vulnerability is present in the web management interface's ping and traceroute functionality, specifically in the...
PT-2025-29563 · Nexxt Solutions · Ncm-X1800 Mesh Router
Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below Description: A command injection issue exists in the web management interface's ping and traceroute functionality of the Nexxt Solutions NCM-X1800 Mesh Router. The application...
Nexxt Solutions NCM-X1800 跨站脚本漏洞
The Nexxt Solutions NCM-X1800 is a router from Nexxt Solutions. A security vulnerability exists in the Nexxt Solutions NCM-X1800 UV1.2.7 and earlier versions, which stems from a cross-site scripting vulnerability that could lead to the hijacking of an administrator session...
CVE-2025-52376
CVE-2025-52376 affects Nexxt Solutions NCM-X1800 Mesh Router (firmware UV1.2.7 and below). The vulnerability is an authentication bypass in the /web/um_open_telnet.cgi endpoint that remotely enables Telnet without authentication. The Telnet service then uses hard-coded credentials (telnetadmin:te...
CVE-2025-52378
Summary: CVE-2025-52378 is a stored XSS vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and earlier. The flaw arises from insufficient sanitization of the DEVICE_ALIAS input used by the /web/um_device_set_aliasname endpoint, enabling an attacker to inject JavaScript that r...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, and kpatch-patch-5_14_0-70_85_1 security update
An update for kpatch-patch-5140-701121, kpatch-patch-5140-701211, kpatch-patch-5140-701241, kpatch-patch-5140-701321, and kpatch-patch-5140-70851 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a securit...
Important: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Magento 2 Shipping Automation: Cut Costs While Enhancing Customer Experience
Disclosure: The information in this article highlights Elsner’s Magento development offerings and related solutions...
Revolutionizing Responsible Disclosure: Introducing the Wordfence Vulnerability Management Portal for WordPress Vendors
The Wordfence team is excited to announce the official launch of the Wordfence Vulnerability Management Portal, the latest addition to the Wordfence Intelligence suite. This new interface is designed to improve and simplify the vulnerability disclosure process between the Wordfence team and...
CVE-2025-49739
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti3tz2nmq2e...
WordPress JKDEVKIT plugin <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by Foxyyy in WordPress Plugin JKDEVKIT versions = 1.9.4...
Photon OS 4.0: Apache PHSA-2025-4.0-0823
An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0823. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
