Lucene search
K

44 matches found

NVD
NVD
added 2026/05/17 1:16 p.m.5 views

CVE-2018-25333

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

8.8CVSS0.0025EPSS
Exploits0References3
CVE
CVE
added 2026/05/17 12:11 p.m.12 views

CVE-2018-25333

CVE-2018-25333 concerns the Nordex N149/4.0-4.5 Wind Turbine Web Server. The vulnerability is an SQL injection in the login flow: attackers can craft POST requests to login.php (no authentication required) to execute arbitrary SQL and potentially bypass login, leaking data. Affected software is N...

8.8CVSS6.1AI score0.0025EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/17 12:11 p.m.8 views

EUVD-2018-21857

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

8.8CVSS6.1AI score0.0025EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/17 12:11 p.m.5 views

CVE-2018-25333

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

8.8CVSS6.1AI score0.0025EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/17 12:11 p.m.4 views

CVE-2018-25333 Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

8.8CVSS6.1AI score0.0025EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/17 12:11 p.m.27 views

CVE-2018-25333 Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

8.8CVSS0.0025EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/17 12:0 a.m.10 views

PT-2026-41559

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloa...

8.8CVSS6.1AI score0.0025EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/17 12:0 a.m.5 views

Nordex N149/4.0-4.5 Wind Turbine Web Server SQL注入漏洞

The Nordex N149/4.0-4.5 Wind Turbine Web Server is a web server component developed by the German company Nordex, used for remote monitoring and management of the Nordex N149 wind turbine system. The 4.0 version of the Nordex N149/4.0-4.5 Wind Turbine Web Server has a SQL injection vulnerability...

8.8CVSS6.2AI score0.0025EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-3982

Malware in sbrugna...

5CVSS6.4AI score0.00533EPSS
Exploits0References3
Fedora
Fedora
added 2024/03/07 10:33 p.m.24 views

[SECURITY] Fedora 40 Update: velocity-2.3-5.fc40

Velocity is a Java-based template engine. It permits anyone to use the simple yet powerful template language to reference objects defined in Java code. When Velocity is used for web development, Web designers can work in parallel with Java programmers to develop web sites according to the...

8.8CVSS7.2AI score0.45835EPSS
Exploits3
Openbugbounty
Openbugbounty
added 2024/02/19 5:39 p.m.12 views

fr.wind-turbine-models.com Cross Site Scripting vulnerability OBB-3854841

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
vulnersOsv
vulnersOsv
added 2024/01/26 12:0 p.m.1 views

carpo (>=0.1.2 <=0.1.3), chimper (>=0.1.2 <=0.2.1) +7 more potentially affected by unknown CVE via conrod (>=0.51.1 <=0.61.1)

conrod CARGO version =0.51.1, =0.1.2, =0.1.2, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.1.4 - turbine =0.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0397...

5.8AI score
Exploits0
OSV
OSV
added 2022/06/20 8:9 p.m.5 views

MAL-2022-6681 Malicious code in turbine_helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03473043e1461c98c39088b74026d40f332cf62a6e22531d1eefe2e4d6c7aa5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:9 p.m.2 views

Malicious code in turbine_helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03473043e1461c98c39088b74026d40f332cf62a6e22531d1eefe2e4d6c7aa5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
HackRead
HackRead
added 2022/04/15 4:16 p.m.19 views

Conti Ransomware Gang Hits German Wind Turbine Giant Nordex

By Deeba Ahmed All of Nordexs internal IT systems were shut down, and remote access to the turbines was disrupted due… This is a post from HackRead.com Read the original post: Conti Ransomware Gang Hits German Wind Turbine Giant Nordex...

2.2AI score
Exploits0
CNVD
CNVD
added 2018/06/07 12:0 a.m.1 views

Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection Vulnerability

A SQL injection vulnerability exists in Nordex N149/4.0-4.5 Wind Turbine Web Server. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.7AI score
Exploits0References1
exploitpack
exploitpack
added 2018/05/22 12:0 a.m.23 views

Nordex N1494.0-4.5 - SQL Injection

Nordex N1494.0-4.5 - SQL Injection Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection Date: 21-05-2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.nordex-online.com Tested on: Windows Version: N149/4.0-4.5 Wind Turbine Category: webapps --- Proof Of Concept...

0.2AI score
Exploits0
0day.today
0day.today
added 2018/05/22 12:0 a.m.49 views

Nordex N149/4.0-4.5 - SQL Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection Exploit Author: t4rkd3vilz Vendor Homepage: http://www.nordex-online.com Tested on: Windows Version: N149/4.0-4.5 Wind Turbine Category: webapps --- Proof Of Conce...

0.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/05/22 12:0 a.m.40 views

Nordex N149/4.0-4.5 Wind Turbine Web Server SQL Injection

Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection Date: 21-05-2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.nordex-online.com Tested on: Windows Version: N149/4.0-4.5 Wind Turbine Category: webapps --- Proof Of Concept -------- Request POST /php/login.php...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2018/05/22 12:0 a.m.41 views

Nordex N149/4.0-4.5 - SQL Injection

Exploit Title: Nordex N149/4.0-4.5 Wind Turbine Web Server - SQL Injection Date: 21-05-2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.nordex-online.com Tested on: Windows Version: N149/4.0-4.5 Wind Turbine Category: webapps --- Proof Of Concept -------- Request POST /php/login.php...

7.4AI score
Exploits0
Rows per page
Query Builder