Exploit for CVE-2024-42007

CVE-2024-42007 - php-spx Path Traversal Exploit This reposito...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2024-54085

AMI MegaRAC SPx BMC contains an authentication bypass via the Redfish Host Interface that allows remote attackers to bypass authentication. This affects SPx products, with CVSS data indicating CRITICAL impact (NVD CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) and (CVSS 4.0: AV:N/AC:L/A...

PT-2025-10756

Name of the Vulnerable Software and Affected Versions AMI MegaRAC SPx versions prior to 2024-08-27 ASUS PRO WS W790E-SAGE SE version prior to 1.1.57 ASUS PRO WS W680M-ACE SE version prior to 1.1.21 ASUS PRO WS WRX90E-SAGE SE version prior to 2.1.28 ASUS Pro WS WRX80E-SAGE SE WIFI version prior to...

CVE-2022-42289

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2022-42290

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

The CVE-2024-44623 entry has concrete technical details in connected data: SPX-GC (TuomoKu) versions <= 1.3.0 are affected. The root cause is the use of unsanitized user input passed to the Node.js child_process.exec function in routes/routes-api.js, enabling unauthenticated remote code execut...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the childprocess.js function...

Exploit for Code Injection in Spx Spx_Graphics_Controller

CVE-2024-44623 In SPX-GC...

CVE-2024-42007

SPX aka php-spx through 0.4.15 allows SPXUIURI Directory Traversal to read arbitrary files...

CVE-2024-42007

SPX aka php-spx through 0.4.15 allows SPXUIURI Directory Traversal to read arbitrary files...

CVE-2024-42007

CVE-2024-42007 affects SPX (php-spx) up to version 0.4.15, enabling a SPX_UI_URI Directory Traversal to read arbitrary server files. A PoC exists showing exploitation; multiple sources confirm the vulnerability and affected range. Some connected advisories (e.g., PT Security PT-2024-29686) specif...

CVE-2024-42007

SPX aka php-spx through 0.4.15 allows SPXUIURI Directory Traversal to read arbitrary files...

SPX 安全漏洞

SPX is a simple PHP parser by Sylvain L. Personal Developer. A security vulnerability exists in SPX php-spx version 0.4.15 and earlier. An attacker can read arbitrary files by exploiting the vulnerability...

CVE-2024-42007

SPX aka php-spx through 0.4.15 allows SPXUIURI Directory Traversal to read arbitrary files...

HPESBCR04667 rev.1 - HPE Cray Servers Using AMI MegaRac SPX Software (AMI-SA-2023010), Multiple Vulnerabilities

Potential Security Impact: Local: memory corruption, Buffer Overflow, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD665 - prior to BMC 1.14 in HPE Cray SC XD665 Firmware Pack 2024.01.00 HPE Cray XD670 - prior to BMC 1.14 in BMC Firmware for HP...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...