Lucene search
+L

1897 matches found

CVE
CVE
added 2025/05/05 7:31 p.m.72 views

CVE-2025-4286

CVE-2025-4286 affects Intelbras InControl (versions up to 2.21.59). The vulnerability is in an unknown function of the Dispositivos Edição Page, where manipulation of the Senha de Comunicação argument results in unprotected credential storage. It can be exploited remotely, and public exploits hav...

5.1CVSS3.7AI score0.00505EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.13 views

The vulnerability of the Login Dashboard component of TP-Link’s router software lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Login Dashboard component of TP-Link’s microprogramming router TL-WR840N relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted SQL code...

7.5CVSS7.1AI score
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.12 views

The vulnerability of TP-Link M7000 4G LTE Mobile Wi-Fi Router’s microprogramming software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of TP-Link M7000 4G LTE Mobile Wi-Fi Router’s microprogramming software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted SQL code remotel...

10CVSS6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.10 views

The vulnerability of TP-Link M7200 4G LTE Mobile Wi-Fi Router’s microprogramming software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of TP-Link M7200 4G LTE Mobile Wi-Fi Router’s microprogramming software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted SQL code remotel...

6.5CVSS6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/27 12:00 a.m.9 views

The vulnerability of the LockGateway method in the software for managing and monitoring remote devices in telemetry and telemechanics systems allows a hacker to bypass security restrictions and gain access to write and read arbitrary files.

The vulnerability of the LockGateway method in software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security restrictio...

9CVSS5.8AI score0.00751EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/27 12:00 a.m.14 views

The vulnerability of the UnlockDatabaseSettings method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allows a hacker to circumvent security restrictions and gain access to write and read arbitrary files.

The vulnerability of the UnlockDatabaseSettings method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to bypass security...

9CVSS5.7AI score0.00654EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/25 12:00 a.m.14 views

The vulnerability of the UpdateConnectionVariablesWithImport method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the UpdateConnectionVariablesWithImport method in software for managing and monitoring deleted objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

9CVSS5.6AI score0.00751EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/25 12:00 a.m.14 views

The vulnerability of the GetConnectionVariables method in the software for managing and monitoring remote objects in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GetConnectionVariables method in software for controlling and monitoring remote objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise t...

9CVSS5.7AI score0.00751EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/25 12:00 a.m.13 views

PT-2025-17883 · WordPress · Prevent Direct Access – Protect Wordpress Files

Name of the Vulnerable Software and Affected Versions: Prevent Direct Access – Protect WordPress Files plugin versions up to, and including, 2.8.8 Description: The issue allows unauthenticated attackers to extract sensitive data, including files protected by the plugin, due to insufficient...

5.3CVSS6AI score0.0038EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2025/04/25 12:00 a.m.12 views

The vulnerability of the LockSmtpSettings method in the software for managing and monitoring remote devices in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the LockSmtpSettings method in the software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the...

9CVSS5.7AI score0.00654EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/25 12:00 a.m.12 views

The vulnerability of the GetActiveConnectionVariables method in the software for managing and monitoring remote objects in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GetActiveConnectionVariables method in software for managing and monitoring remote objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromis...

9CVSS5.7AI score0.00751EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.10 views

The vulnerability of the UpdateOpcSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UpdateOpcSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allo...

9CVSS6.7AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.11 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.10 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.14 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.16 views

The vulnerability of the ImportDatabase method in software for managing and monitoring deleted objects in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ImportDatabase method in software for managing and monitoring removed objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.16 views

The vulnerability of the SafeInspect system for privileged users stems from the lack of measures taken to protect the structure of the web page. This allows a perpetrator to execute arbitrary HTML code.

The vulnerability of the SafeInspect privilege user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTML code remotely...

8.7CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.13 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/17 11:22 p.m.16 views

CVE-2025-27927

An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...

6.9CVSS7.1AI score0.00293EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/15 10:15 p.m.7 views

CVE-2025-27927

An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...

6.9CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder