6523 matches found
CVE-2025-3008 Novastar CX40 NetFilter Utility netconfig popen command injection
A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be...
CVE-2025-3007
CVE-2025-3007 affects Novastar CX40 (up to 2.44.0) in the NetFilter Utility, specifically the /usr/nova/bin/netconfig getopt function. The underlying issue is a stack-based buffer overflow caused by manipulation of arguments (cmd, netmask, pipeout, nettask). The advisory notes that the exploit ha...
CVE-2025-3007 Novastar CX40 NetFilter Utility netconfig getopt stack-based overflow
A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...
CVE-2025-3007 Novastar CX40 NetFilter Utility netconfig getopt stack-based overflow
A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20439link is external Cisco Smart Licensing Utility Static Credential Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cybe...
Novastar CX40 安全漏洞
Novastar CX40 is a 4K LED display controller from Novastar. A security vulnerability exists in Novastar CX40 version 2.44.0 and earlier, which originates from a command injection in the NetFilter Utility component...
Drupal Cache Utility 跨站请求伪造漏洞
Drupal Cache Utility is a tool module for the Drupal community to manage and optimize the Drupal cache. A cross-site request forgery vulnerability exists in Drupal Cache Utility versions prior to 1.2.1 that stems from cross-site request forgery...
PT-2025-13817
Name of the Vulnerable Software and Affected Versions Novastar CX40 versions up to 2.44.0 Description A critical vulnerability has been found in the NetFilter Utility component of Novastar CX40. The issue affects the system/popen function of the /usr/nova/bin/netconfig file, leading to command...
CVE-2025-31690: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Drupal Cache Utility allows Cross Site Request Forgery.This issue affects Cache Utility: from 0.0.0 before 1.2.1...
Novastar CX40 安全漏洞
Novastar CX40 is a 4K LED display controller from Novastar. A security vulnerability exists in Novastar CX40 version 2.44.0 and earlier, which originates from a stack buffer overflow in the NetFilter Utility component...
PT-2025-13815
Name of the Vulnerable Software and Affected Versions Novastar CX40 versions up to 2.44.0 Description A critical issue affects the getopt function of the /usr/nova/bin/netconfig file in the NetFilter Utility component. The manipulation of the cmd, netmask, pipeout, or nettask arguments leads to a...
PT-2025-13854 · Drupal · Drupal Cache Utility
Name of the Vulnerable Software and Affected Versions: Drupal Cache Utility versions 0.0.0 through 1.2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Drupal Cache Utility, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 0.0.0...
CVE-2025-3008: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/popen of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation leads to command injection. The exploit has been disclosed to the public and may be...
CVE-2025-3007: Stack-based Buffer Overflow
A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function getopt of the file /usr/nova/bin/netconfig of the component NetFilter Utility. The manipulation of the argument cmd/netmask/pipeout/nettask leads to stack-based buffer overflow...
CVE-2024-13804
Unauthenticated RCE in HPE Insight Cluster Management Utility...
CVE-2024-13804
Unauthenticated RCE in HPE Insight Cluster Management Utility...
CVE-2024-13804
Unauthenticated RCE in HPE Insight Cluster Management Utility...
CVE-2024-13804
The HPE Insight Cluster Management Utility (CMU) , specifically version 8.2 , is vulnerable to an unauthenticated Remote Code Execution (RCE) flaw. An unauthenticated attacker could exploit this vulnerability to execute commands with root privileges . Due to the severity of this risk, it is recom...
Hewlett Packard Enterprise Insight Cluster Management Utility 安全漏洞
Hewlett Packard Enterprise Insight Cluster Management Utility is a utility for Hewlett Packard Enterprise cluster management from Hewlett Packard Enterprise USA. It can be used for monitoring, configuration and management of cluster systems. A security vulnerability exists in Hewlett Packard...