Siemens SINEC Traffic Analyzer Multiple Vulnerabilities

SINEC Traffic Analyzer is a network management tool provided by Siemens for network traffic monitoring, performance analysis and troubleshooting. The tool supports the configuration and management of industrial network devices such as SCALANCE and RUGGEDCOM, helping users to optimize network...

CVE-2025-7390

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication...

Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could result in a remote attacker being able to delay the processing of the Web server function and prevent legitimate users from utilizing the Web server function by sending a specially crafted HTTP request. 2. RECOMMENDED PRACTICES...

PT-2025-34537 · Undefined · Undefined

CVE-2025-57831 - Apache HTTP Server Unknown Method Response CVE ID : CVE-2025-57831 Published : Aug. 21, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PT-2025-34532 · Undefined · Undefined

CVE-2025-57826 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-57826 Published : Aug. 21, 2025, 4:15 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PT-2025-34536 · Undefined · Undefined

CVE-2025-57830 - Apache HTTP Server Authentication Bypass CVE ID : CVE-2025-57830 Published : Aug. 21, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-34533 · Undefined · Undefined

CVE-2025-57827 - Apache HTTP Server Authentication Bypass CVE ID : CVE-2025-57827 Published : Aug. 21, 2025, 4:15 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-34538 · Undefined · Undefined

CVE-2025-57832 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57832 Published : Aug. 21, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Linux Distros Unpatched Vulnerability : CVE-2023-30847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - H2O is an HTTP server. In versions 2.3.0-beta2 and prior, when the reverse proxy handler tries to processes a certain type of invalid HTTP request, it tries to...

CVE-2025-53251: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through 7.2...

TencentOS Server 4: httpd (TSSA-2025:0604)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0604 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Tenda AC6 V5.0 HTTP Header Parsing denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2166 Tenda AC6 V5.0 HTTP Header Parsing denial of service vulnerability August 20, 2025 CVE Number CVE-2025-30256 SUMMARY A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted...

PT-2025-34339 · Undefined · Undefined

CVE-2025-57748 - Apache HTTP Server Local File Inclusion CVE ID : CVE-2025-57748 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Eclipse Jetty 安全漏洞

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty versions 9.4.57 and earlier, 10.0.25 and earlier, 11.0.25 and earlier, 12.0.21 and earlier, and 12.1.0.alpha2 and earlier, which originat...

Linux Distros Unpatched Vulnerability : CVE-2023-5379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by...

PT-2025-34329 · Undefined · Undefined

CVE-2025-57742 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57742 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-34338 · Undefined · Undefined

CVE-2025-57747 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57747 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The vulnerability in the built-in web server component boa (/boafrm/formTmultiAP) of the HTTP POST Request Handler microprogramming system for TOTOLINK A3002R and A3002RU routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

The vulnerability in the built-in web server component boa (/boafrm/formTmultiAP) of the TOTOLINK EX1200T router’s microprogramming system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP in the HTTP POST Request Handler of the microprogramming software for router devices TOTOLINK EX1200T lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an...

The vulnerability in the built-in web server boa (/boafrm/formReflashClientTbl) of TOTOLINK EX1200T router microprogramming software allows a perpetrator to execute arbitrary commands or cause a service failure.

The vulnerability of the built-in web server boa /boafrm/formReflashClientTbl of TOTOLINK EX1200T router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause ...