Cisco Catalyst SD-WAN Manager 安全漏洞

Cisco Catalyst SD-WAN Manager is a highly customizable dashboard provided by Cisco. It simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. There is a security vulnerability present in Cisco Catalyst SD-WAN Manager, which stems from insufficient user...

UBUNTU-CVE-2025-62399

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...

EUVD-2017-7927

Malware in sbrugna...

EUVD-2009-5122

Malware in sbrugna...

CVE-2009-20009

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before...

CVE-2009-20009 Belkin Bulldog Plus Web Service Buffer Overflow

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before...

Canon Small Office Multifunction Printers 缓冲区错误漏洞

Canon Small Office Multifunction Printers is a small office multifunction printer from Canon Japan. A buffer error vulnerability exists in Canon Small Office Multifunction Printers, which stems from a buffer overflow in the WebService Authentication handling, which could result in the execution o...

PYSEC-2021-851

Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The issue allows for a malicious actor with a carefully crafted request to successfully authenticate and gain access to existing protected RE...

CVE-2017-16743

PHOENIX CONTACT FL SWITCH series (3xxx, 4xxx, 48xxx) running firmware 1.0–1.32 are affected by CVE-2017-16743, an Improper Authorization vulnerability. A remote unauthenticated attacker can craft special HTTP requests to bypass web-service authentication and gain administrative privileges on the ...

PT-2018-02: Improper Authorization in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Improper Authorization vulnerability in PHOENIX CONTACT FL SWITCH. An Improper Authorization issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to bypass web-service authentication and obtain...