← All credits
Abdul Mhanni
40 vulnerability records and advisories credit this contributor.
CVE-2025-66259
Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters
CVE-2025-66265
Insecure permissions in configuration directory (C:\\usr)
CVE-2025-66266
Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation
CVE-2025-66260
PostgreSQL SQL Injection (status_sql.php)
CVE-2025-66251
Unauthenticated Path Traversal with Arbitrary File Deletion
CVE-2025-66261
Unauthenticated OS Command Injection (restore_settings.php)
CVE-2025-66262
Arbitrary File Overwrite via Tar Extraction Path Traversal
CVE-2025-66250
Unauthenticated Arbitrary File Upload (status_contents.php)
CVE-2025-66269
Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM
CVE-2025-12683
NULL DACL assigned to Named Pipe communicating with SYSTEM Service