server-sqli

This is a PoC exploit for CVE-YYYY-NNNN, an intentional SQL inje...

Vulnerabilities fixed in Cisco NX-OS Software

Cisco has fixed vulnerabilities in Cisco NX-OS Software for Nexus 3000 and 9000 Series Switches. The vulnerabilities are in several features of the Cisco NX-OS Software, including IS-IS, PIM6, logging, command-line interface CLI, and the REST API of the Nexus Dashboard. These vulnerabilities can ...

CVE-2025-20262

A vulnerability in the Protocol Independent Multicast Version 6 PIM6 feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denia...

CVE-2025-20262 Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability

A vulnerability in the Protocol Independent Multicast Version 6 PIM6 feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denia...

PT-2025-34889 · Cisco · Cisco Nx-Os +5

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software for Cisco Nexus 3000 Series Switches Cisco Nexus 9000 Series Switches in standalone NX-OS mode Cisco UCS 6400 Fabric Interconnects Cisco UCS 6500 Series Fabric Interconnects Cisco UCS 9108 100G Fabric Interconnects affect...

PT-2025-34888 · Cisco · Cisco Nexus 3000 Series Switches +1

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 Series Switches Cisco Nexus 9000 Series Switches Description: A vulnerability in the Protocol Independent Multicast Version 6 PIM6 feature could allow an authenticated, low-privileged, remote attacker to trigger a crash of th...

The vulnerability of the Site Survey web interface of the Intelbras RX 1500 and RX 3000 software allows attackers to perform cross-site scripting attacks.

The vulnerability of the Site Survey web interface of the Intelbras RX 1500 and RX 3000 software lies in the lack of measures taken to neutralize special elements during the processing of ESSID identifiers. Exploiting this vulnerability allows a remote attacker to perform domain-external attacks ...

PHOENIX CONTACT CHARX SEC-3xxx 访问控制错误漏洞

PHOENIX CONTACT CHARX SEC-3000 etc. are products of PHOENIX CONTACT, Germany.PHOENIX CONTACT CHARX SEC-3000 is an AC Charge Controller.PHOENIX CONTACT CHARX SEC-3050 is an AC Charge Controller.PHOENIX CONTACT CHARX SEC-3100 is an AC Charge Controller. PHOENIX CONTACT CHARX SEC-3100 is an AC charg...

CVE-2023-41946

A cross-site request forgery CSRF vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified...

The vulnerability of the set_ftp_cfg() function in the nas.cgi script of the Wavlink AC3000 router’s microprogramming system allows a hacker to circumvent existing security restrictions.

The vulnerability of the setftpcfg function in the nas.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending...

CVE-2023-7005

A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field...

GL.iNet多款产品 安全漏洞

GL.iNet MT3000 and others are products of GL.iNet China.GL.iNet MT3000 is an AX3000 portable router using Wi-Fi 6 protocol.GL.iNet MT2500 is a router.GL.iNet MT6000 is a router.GL.iNet MT6000 is a router. A security vulnerability exists in several GL.iNet products. An attacker could exploit the...

GL.iNet多款产品 安全漏洞

GL.iNet MT3000 and others are products of China's GL.iNet GL.iNet.GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol.GL.iNet AXT1800 is a router.GL.iNet MT2500 is a router.GL.iNet AXT1800 is a router.GL.iNet AXT1800 is a router.GL.iNet MT2500 is a router.GL.iNet MT2500 is ...

GL.iNet多款产品 安全漏洞

GL.iNet AX1800 and others are products of China Guanglian Zhitong GL.iNet company.GL.iNet AX1800 is a wireless router.GL.iNet AXT1800 is a router.GL.iNet MT6000 is a router.GL.iNet AXT1800 is a router.GL.iNet MT6000 is a router.GL.iNet MT6000 is a router. A security vulnerability exists in severa...

The vulnerability of the access control list mechanism in the Cisco NX-OS operating system for Cisco Nexus 3000 and Nexus 9000 switches allows a perpetrator to gain access to network resources.

The vulnerability of the access control list mechanism in the Cisco NX-OS operating system for Cisco Nexus 3000 and Nexus 9000 switches is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to network resources remotely...

PT-2024-1909 · Cisco · Cisco Nexus 3000 Series Switches +2

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 and 9000 Series Switches affected versions not specified Description: A vulnerability in the access control list ACL programming for port channel subinterfaces could allow an unauthenticated, remote attacker to send traffic...

多款Yokogawa产品安全漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa Japan. A security vulnerability exists in several Yokogawa products, which stems from an elevation of privilege vulnerability discovered in CENTUM Authentication Mode. The following products and versions are affected: CENTUM CS 1000,...

CVE-2023-0887 phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path

A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown processing of the file tftpd64svc.exe. The manipulation leads to unquoted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

CVE-2022-3411

A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...