648 matches found
The vulnerability of the snmptrapd component of the software suite for deploying and using the SNMP protocol Net-SNMP allows a attacker to execute arbitrary code.
The vulnerability of the Net-SNMP software suite, which is used for deploying and operating the SNMP protocol, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted packag...
CVE-2025-68615
A flaw was found in net-snmp. A remote attacker can trigger a buffer overflow in the snmptrapd daemon by sending a specially crafted SNMP packet, causing the daemon to crash and resulting in a denial of service. Mitigation Make sure to restrict network traffic to the snmptrapd daemon using firewa...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the snmptrapd daemon. An attacker can execute arbitrary code or cause a crash by sending a specially crafted packet. Remediation A fix was pushed into the master branch but not yet published. References...
AZL-73175 CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2...
CVE-2025-68615
net-snmp snmptrapd is affected by CVE-2025-68615 via a buffer overflow triggered by a specially crafted trap packet, crashing the daemon. Affected versions are before 5.9.5 and 5.10.pre2; patch versions are 5.9.5 and 5.10.pre2. Remediation: upgrade to those patched releases (or newer).
PT-2025-52727
Name of the Vulnerable Software and Affected Versions net-snmp versions prior to 5.9.5 net-snmp version 5.10.pre2 Description net-snmp is a SNMP application library, tools and daemon. A specially crafted packet sent to the snmptrapd daemon can cause a buffer overflow, potentially leading to a...
NTPsec < 0.9.5 Multiple Vulnerabilities
NTPsec is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntpsec:ntpsec"; ifdescription...
Characterizing Large-Scale Adversarial Activities through Large-Scale Honey-Nets
The increasing sophistication of cyber threats demands novel approaches to characterize adversarial strategies, particularly those targeting critical infrastructure and IoT ecosystems. This paper presents a longitudinal analysis of attacker behavior using HoneyTrap, an adaptive honeypot framework...
CVE-2025-13373
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...
Advantech iView SQL注入漏洞
Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that stems from improper SNMP v1 trap request cleanup, which can be exploited by attackers to obta...
CVE-2025-12406 Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...
CVE-2025-12406 Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...
WordPress plugin Project Honey Pot Spam Trap 跨站请求伪造漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin i...
WordPress Project Honey Pot Spam Trap plugin <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Project Honey Pot Spam Trap versions = 1.0.1...
ManageEngine OpManager Stored XSS (CVE-2025-9227)
The version of ManageEngine OpManager running on the remote web server is prior to 128466, 128509 prior or equal to 128542, 128551 prior or equal to 128598, 128607 prior or equal to 128610. It is, therefore, affected by an stored xSS vulnerability in SNMP Trap Processor. Note that Nessus has not...
EUVD-2025-137377
Malicious code in polymer-trtean-trap npm...
EUVD-2025-135235
Malicious code in trusi-tran-trap npm...
EUVD-2025-135232
Malicious code in truw-tran-trap npm...