The vulnerability in the web interface of the FortiOS operating system and the FortiProxy proxy server, which allows a hacker to gain unauthorized access to protected information.

The vulnerability in the web interface for operating system management software FortiOS and the proxy server used for protecting against Internet attacks FortiProxy is related to errors in processing hypertext links. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...

The vulnerability of the WebHMI component of the EcoStruxure Power Automation System User Interface (EcoSUI) and the EcoStruxure Microgrid Operation Large (EMO-L) system, which allows a hacker to gain unauthorized access to the device.

The vulnerability of the WebHMI component of the SCADA system EcoStruxure Power Automation System User Interface EcoSUI and the EcoStruxure Microgrid Operation Large EMO-L system for optimizing distributed energy resources is related to insecure initialization of the resources. Exploiting this...

CVE-2025-22370 Mennekes smart/premium charges systems, SQL Injection in web configuration interface

Many fields for the web configuration interface of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to execute arbitrary SQL commands because the values are insufficiently neutralized...

The vulnerability in the web interface of the Cisco AsyncOS operating system allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco AsyncOS operating system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the IBM WebSphere Application Server’s web interface allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability in the web interface of IBM WebSphere Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...

CVE-2025-2096

A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiat...

CVE-2025-26202

Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in DZS Router Web Interface. An authenticated attacker can inject malicious JavaScript into the passphrase field, which is stored and later executed when an...

CVE-2025-20208

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

CVE-2025-23410

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...

The vulnerability of the web interface of the Aruba Networks ClearPass Policy Manager allows a perpetrator to execute arbitrary commands.

The vulnerability of the Aruba Networks ClearPass Policy Manager’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines allows a perpetrator to disclose protected information.

The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines involves access control deficiencies. Exploiting this vulnerability allows an attacker to disclose protected information by sending specially crafted HTTP requests...

The vulnerability of the formSetFirewallCfg function in the web interface of the Tenda AC7 router’s software, allowing a hacker to execute arbitrary code.

The vulnerability of the formSetFirewallCfg function in the web interface of the Tenda AC7 router’s microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST reque...

Linux Distros Unpatched Vulnerability : CVE-2023-34237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the...

CVE-2025-23410

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...

CVE-2025-23410 GMOD Apollo Relative Path Traversal

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...

CVE-2025-23410 GMOD Apollo Relative Path Traversal

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...

CVE-2024-47262

Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not...

Linux Distros Unpatched Vulnerability : CVE-2014-5031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information v...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from a competitive condition that could block web interface access...

Linux Distros Unpatched Vulnerability : CVE-2018-4300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web...