CVE-2025-34043

Vacron NVR devices (v1.4) are affected by a remote command injection due to improper input sanitization in the board.cgi script. The issue allows unauthenticated attackers to pass arbitrary commands to the underlying OS via crafted HTTP requests, resulting in remote code execution with the web se...

CVE-2025-34042

CVE-2025-34042 describes an authenticated command-injection vulnerability in Beward N100 IP Camera firmware version M2.1.6.04C014. The issue stems from unsafely embedded ServerName and TimeZone parameters in the servetest CGI page, allowing an authenticated attacker with web-interface access to i...

CVE-2025-20282

CVE-2025-20282 affects Cisco ISE and ISE-PIC. An unauthenticated attacker can exploit an internal API to upload arbitrary files via the vulnerable endpoint /api/v1/config/upload , bypassing validation and enabling the execution of those files on the host with root privileges. The issue arises fro...

CVE-2025-20281

CVE-2025-20281 affects Cisco Identity Services Engine (ISE) and ISE-PIC via an exposed API where insufficient input validation enables unauthenticated remote code execution as root. The flaw is described as an input-validation vulnerability in a specific API endpoint, allowing an attacker to craf...

CVE-2021-4457

CVE-2021-4457 concerns the ZoomSounds WordPress plugin prior to 6.05, where a vulnerable PHP file allows unauthenticated users to upload arbitrary files anywhere on the web server. This leads to a high-impact exposure (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N; base 9.1) affecting the plugin’...

CVE-2025-6543

CVE-2025-6543 affects Citrix NetScaler ADC and NetScaler Gateway. The vulnerability is a memory overflow in the WebProc/AAA gateway flow triggered when processing the Host header via the /nf/auth/startwebview.do path, causing uncontrolled memory access that can lead to a Denial of Service and uni...

CVE-2024-51978

CVE-2024-51978 enables an unauthenticated attacker to derive the device’s default administrator password by leaking the device serial number. The serial number can be exposed via CVE-2024-51977 (through HTTP, HTTPS, IPP), or via PJL or SNMP requests, allowing remote compromise of Brother and Koni...

CVE-2024-51977

CVE-2024-51977 affects at least one Brother multi‑function device (notably the MFC‑L9570CDW) where an unauthenticated attacker can reach the HTTP/HTTPS/IPP services on ports 80/443/631 and retrieve /etc/mnt_info.csv. The CSV exposes device info including model, firmware version, IP address, and s...

CVE-2025-34041

Sangfor Endpoint Detection and Response (EDR) management platform on Chinese-language builds 3.2.16, 3.2.17 and 3.2.19 are affected by an OS command-injection vulnerability. The issue allows unauthenticated attackers to craft HTTP requests to the EDR Manager interface, enabling arbitrary command ...

CVE-2025-34040

CVE-2025-34040 affects Zhiyuan OA platform via the wpsAssistServlet interface. The vulnerability arises from improper validation of the realFileType and fileId parameters during multipart uploads, enabling path traversal to upload crafted JSP files outside of allowed directories. This unauthentic...

CVE-2025-34039

CVE-2025-34039 affects Yonyou UFIDA NC v6.5 and earlier, due to exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. An unauthenticated remote attacker can exploit the bsh.script parameter to execute arbitrary Java code, potentially running system com...

CVE-2025-34038

Weaver e-cology 8.0 is affected by a SQL injection in getdata.jsp via the unsanitized sql parameter, exploited through the getSelectAllIds(sql, type) workflow in AjaxManager. Unauthenticated attackers can run arbitrary SQL queries and may access sensitive data (e.g., administrator password hashes...

CVE-2025-34037

CVE-2025-34037 is an OS command injection in Linksys E-Series routers, exploitable via unauthenticated HTTP POSTs to /tmUnblock.cgi or /hndUnblock.cgi on port 8080. The issue stems from improper sanitization of the ttcp_ip parameter, enabling shell command injection and arbitrary code execution. ...

CVE-2025-34036

The CVE-2025-34036 issue affects white-labeled TVT DVRs’ Cross Web Server, a custom HTTP service listening on TCP ports 81/82. The web UI fails to sanitize the [lang] parameter in the /language/[lang]/index.html path, allowing unsafely used input in a tar extraction command to enable OS command i...

CVE-2025-34034

CVE-2025-34034 relates to a hardcoded credential vulnerability in the Blue Angel Software Suite on embedded Linux devices. The affected software contains multiple default/hardcoded user accounts not disclosed publicly, allowing unauthenticated or low-privilege attackers to gain administrative acc...

CVE-2025-34033

CVE-2025-34033 affects the Blue Angel Software Suite on embedded Linux devices. The vulnerability is an OS command injection in the webctrl.cgi script through the ping_addr parameter, where input is not properly sanitized before being passed to the system-level ping command. An authenticated atta...

CVE-2025-34031

Summary: CVE-2025-34031 affects Moodle LMS Jmol Plugin, version 6.1 and earlier. The vulnerability is a local/file path traversal in the jsmol.php endpoint: user input is passed directly to file_get_contents(), enabling reading arbitrary files from the server when the parameter is crafted. No aut...

CVE-2025-32975

CVE-2025-32975 affects Quest KACE SMA versions 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4). The issue is an authentication bypass in the SSO authentication handling mechanism that could allow an atta...

CVE-2021-41691

CVE-2021-41691 affects the OS4Ed Open Source Information System Community (openSIS) v8.0. The vulnerability is a SQL injection in the POST endpoint "/TransferredOutModal.php" triggered by the parameters student_id and TRANSFER[SCHOOL] (notably in the path and parameter naming variants such as TRA...

CVE-2025-48700

CVE-2025-48700 concerns Zimbra Collaboration Suite (ZCS) versions 8.8.15–10.1. The issue is a cross-site scripting (XSS) vulnerability in the Classic UI caused by insufficient HTML sanitization, allowing an attacker to execute arbitrary JavaScript within a user session when a user views a crafted...