113 matches found
CVE-2024-10723 Stored XSS in phpipam/phpipam
A stored cross-site scripting XSS vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the destination address field of the NAT tool, which can be executed when a user interacts with the field. The impact of this...
CVE-2025-27778 Applio allows unsafe deserialization in infer.py
Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in infer.py. The issue can lead to remote code execution. As of time of publication, a fix is available on the main branch of the Applio repository but not attached to a numbered release...
The vulnerability of the Intel Battery Life Diagnostic Tool, related to synchronization errors when using general resources, allows a hacker to exploit their privileges.
The vulnerability of the Intel Battery Life Diagnostic Tool relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2024-52416
Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through = 2.2...
CVE-2025-23684
Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Debug Tool: from n/a through = 2.2...
Vulnerability of the SAP setup tool for simplified installation and configuration. The SAP setup involves an uncontrolled search element, which allows attackers to increase their privileges.
The vulnerability of the SAP setup tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in its inability to remove special elements used in the basic operating system, allowing attackers to execute arbitrary commands.
The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures taken to neutralize special elements used in the basic operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2023-31280
An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage Warranty Checker is updated to no longer return the IMEI and Serial Number in addition to the warranty status when the Serial Number or IME...
The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).
The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).
The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
PT-2024-32983 · Sunniwell · Sunniwell Ht3300
Name of the Vulnerable Software and Affected Versions: sunniwell HT3300 versions before 1.0.0.B022.2 Description: The issue concerns insecure permissions in the sunniwell HT3300 device, specifically with the /usr/local/bin/update program, which is used for software updates and has the execution...
CVE-2024-27115
A unauthenticated Remote Code Execution RCE vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publicly accessible folder before verifying any requirements. This leads to the possibility of execution...
CVE-2024-27112
A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02...
The vulnerability of the OpenSSL Handler component in the IPerf3 network bandwidth measurement tool allows a hacker to access confidential information.
The vulnerability of the OpenSSL Handler component in the IPerf3 network bandwidth measurement tool is related to the use of a secondary synchronization channel during RSA decryption operations. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
The vulnerability of Parasolid’s 3D geometric modeling tool lies in the possibility of the operation exceeding the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Parasolid’s 3D geometric modeling tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by opening a specially crafted XT format file...
The vulnerability of the cURL command-line utility lies in the lack of protection for service data, allowing attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the command-line tool cURL relates to the installation of “superbug files” in Curl, which are then transmitted back to a larger number of sources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected informati...
The vulnerability of the web-based collaboration tool for planning, creating, managing, and executing tests at all stages of the IBM Engineering Test Management cycle exists due to the lack of protective measures for the website structure. This allows attackers to execute arbitrary JavaScript code.
The vulnerability of the web-based collaboration tool for planning, creating, managing, and executing tests at all stages of the development cycle in IBM Engineering Test Management exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a...
The vulnerability of the monitoring tool for VMware Aria Operations, related to errors in privilege management, allows a perpetrator to escalate their privileges.
The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).
The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
