48 matches found
Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102076)
The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
CVE-2026-102076
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
CVE-2026-102076
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
CVE-2026-102076
A vulnerability exists in the web service of various APOGEE and TALON products, including MBC , MEC , PXC Compact , PXC Modular , and TC Compact/Modular models. The root cause is the improper validation of user-supplied input within the upload code, categorized as a stack-based buffer overflow (C...
CVE-2026-102076
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
PT-2026-111371
Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...
CVE-2026-102076: Stack-based Buffer Overflow
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
CVE-2023-40731
A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application allows users to upload arbitrary file types. This could allow an attacker to upload malicious files, that could potentially lead to code tampering...
PT-2025-46574
Name of the Vulnerable Software and Affected Versions a+HRD and a+HCM versions affected versions not specified Description The a+HRD and a+HCM applications developed by aEnrich are susceptible to a Stored Cross-Site Scripting issue. Authenticated remote attackers can upload files containing...
EUVD-2020-28189
Malware in sbrugna...
EUVD-2025-10961
Malicious code in bioql PyPI...
EUVD-2024-35344
Malicious code in bioql PyPI...
EUVD-2023-28326
Malicious code in bioql PyPI...
EUVD-2025-22427
Malicious code in bioql PyPI...
EUVD-2022-30242
Malicious code in bioql PyPI...
CVE-2012-10062
CVE-2012-10062 affects XAMPP 1.7.3 with default WebDAV configuration, where the WebDAV service at /webdav/ accepts HTTP PUT using default credentials, allowing remote authenticated attackers to upload a PHP payload and trigger execution via a GET request, resulting in remote code execution on the...
Trend Micro Apex One OS Command Injection Vulnerability
Trend Micro Apex One Management Console on-premise contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...
CVE-2025-54948
A vulnerability in Trend Micro Apex One on-premise management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...
CVE-2025-54987
A vulnerability in Trend Micro Apex One on-premise management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture...
CVE-2025-8323
The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...