25 matches found
CVE-2019-25723
Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Attackers can overload the internal...
CVE-2025-56079
OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...
EUVD-2019-6772
Malware in sbrugna...
EUVD-2017-4037
Malware in sbrugna...
EUVD-2004-2162
Malware in sbrugna...
EUVD-2017-4043
Malware in sbrugna...
EUVD-2020-12970
Malware in sbrugna...
CVE-2025-3577
UNSUPPORTED WHEN ASSIGNED A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00AAJC.16C0 could allow an authenticated attacker with administrator privileges to access restricted directories by sending a crafted HTTP request to an affected...
Zyxel AMG1302-T10B 安全漏洞
The Zyxel AMG1302-T10B is an integrated wireless ADSL2+ router from Zyxel China. A security vulnerability exists in the Zyxel AMG1302-T10B version 2.00AAJC.16C0, which originates from a specially crafted HTTP request that results in path traversal and possible access to a restricted directory...
Teledyne FLIR M300 安全漏洞
Teledyne FLIR M300 is a camera surveillance device from Teledyne FLIR, Inc. A security vulnerability exists in Teledyne FLIR M300 version 2.00-19, which stems from the possibility of unauthenticated remote code execution...
Teledyne FLIR M300 安全漏洞
The Teledyne FLIR M300 is a camera surveillance device from Teledyne FLIR, USA. A security vulnerability exists in Teledyne FLIR M300 version 2.00-19, which originates from a user account password that is locally encrypted and can be decrypted into plaintext using a utility program...
CVE-2020-8973 ZGR TPS200 NG Improper access control
ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected asset is located, to operate and change several parameters without having to be registered as a user...
Design/Logic Flaw
Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00ABBX.3 and earlier allows attackers to gain privileges and access certain admin pages...
CVE-2017-12466
CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...
CVE-2017-16687
The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username ...
SAP HANA Database SAP HANA extended application services Information Disclosure Vulnerability
SAP HANA Database is an in-memory database based on rows and columns from SAP, which provides fast querying of multidimensional data, filtering of useless data, and synchronization of multiple queries. The database provides fast querying of multidimensional data, filtering of useless data,...
Wordpress ajax-random-post plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . xx is one of the use of Ajax to get the posts of the plugin . A cross-site scripting vulnerability exists in...
CVE-2015-2135
Unspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62a, 2.00, and 2.10 allows remote attackers to execute arbitrary code via unknown vectors...
D-Link DIR-605 - Cross-Site Request Forgery
Exploit Title: D-Link DIR-605 CSRF Vulnerability Date: 20-03-2012 Author: iqzer0++ Version: Firmware Version : 2.00 Tested on: DIR-605 This allows unauthroized access to the device and post injections document.bypass.submit;...
D-Link DIR-605 Cross Site Request Forgery
Exploit Title: D-Link DIR-605 CSRF Vulnerability Date: 20-03-2012 Author: iqzer0++ Version: Firmware Version : 2.00 Tested on: DIR-605 This allows unauthroized access to the device and post injections document.bypass.submit;...