EUVD-2025-37356

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol...

CVE-2025-64389

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol...

CVE-2025-64388

Denial of service of the web server through specific requests to this protocol...

CVE-2025-64389 EXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXT

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol...

CVE-2025-64389

CVE-2025-64389 involves the web server on Circutor TCPRS1plus devices that exchanges sensitive information in clear text via an insecure protocol. Concrete details across connected sources indicate the vulnerability stems from transmitting credentials/data without encryption, enabling potential i...

EUVD-2025-37352

Denial of service of the web server through specific requests to this protocol...

CVE-2025-64388

The CVE-2025-64388 entry concerns Circutor TCPRS1plus, where a denial-of-service against the device’s web server can be triggered by specific requests to the protocol. The reported impact focuses on availability (high) with the CVSS indicating network access, low attack complexity, and no privile...

CVE-2025-64388 Denial of service through specific packets

Denial of service of the web server through specific requests to this protocol...

CVE-2025-64388 Denial of service through specific packets

Denial of service of the web server through specific requests to this protocol...

CVE-2025-64386 HIJACKING OF THE TOKEN AND GAINING ACCESS

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...

EUVD-2025-37348

The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...

CVE-2025-64386

CVE-2025-64386 describes a JWT-based session hijacking flaw in Circutor TCPRS1plus (and related entries in multiple feeds). During an active session, an attacker can reuse a previously issued JWT token to modify security parameters or steal the session without detection. The issue is rooted in th...

EUVD-2020-30807

Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler did not properly restrict file types or enforce storage outside of the webroot, and the web server permitted execution within the upload directory. An...

Circutor TCPRS1plus 安全漏洞

Circutor TCPRS1plus is a communication converter from Circutor Spain. A security vulnerability exists in Circutor TCPRS1plus that originates from the device web server exchanging sensitive information in clear text via an insecure protocol...

Circutor TCPRS1plus 安全漏洞

Circutor TCPRS1plus is a communication converter from Circutor Spain. A security vulnerability exists in Circutor TCPRS1plus that stems from a web server that allows an attacker to reuse old JWT tokens during legitimate session activity, potentially leading to session hijacking and security...

PT-2025-44625

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web server allows an attacker to reuse an old session JWT token while a legitimate session is active, potentially leading to session hijacking. An attacker...

PT-2025-44630

Name of the Vulnerable Software and Affected Versions Circutor TCPRS1plus affected versions not specified Description A denial of service condition can occur in the web server due to specific requests made to the protocol. The issue involves a resource exhaustion vector. Recommendations At the...

Circutor TCPRS1plus 安全漏洞

Circutor TCPRS1plus is a communication converter from Circutor Spain. A security vulnerability exists in Circutor TCPRS1plus that originates from a specific request that could result in a denial of service to the web server...

CVE-2025-34287

Nagios XI versions prior to 2024R2 contain an improperly owned script, processperfdata.pl, which is executed periodically as the nagios user but owned by www-data. Because the file was writable by www-data, an attacker with web server privileges could modify its contents, leading to arbitrary cod...

CVE-2025-34287

Nagios XI prior to 2024R2 is affected by a local privilege escalation due to an improperly owned script, process_perfdata.pl, which runs as the nagios user but is owned by www-data and writable by www-data. An attacker with web-server privileges could modify the script and trigger arbitrary code ...