CVE-2025-37092 – HPE StoreOnce Command Injection Remote Code Execution

June 2, 2025

CVE ID : CVE-2025-37092

Published : June 2, 2025, 2:15 p.m. | 56 minutes ago

Description : A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-37093 – HPE StoreOnce Authentication Bypass Vulnerability

Next Article CVE-2025-37091 – HPE StoreOnce Command Injection Remote Code Execution Vulnerability

Highlights

CVE-2025-49131 – FastGPT Sandbox Syscall Escalation Vulnerability

June 9, 2025

CVE ID : CVE-2025-49131

Published : June 9, 2025, 1:15 p.m. | 2 hours, 25 minutes ago

Description : FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated code in isolation. The sandbox before version 4.9.11 has insufficient isolation and inadequate restrictions on code execution by allowing overly permissive syscalls, which allows attackers to escape the intended sandbox boundaries. Attackers could exploit this to read and overwrite arbitrary files and bypass Python module import restrictions. This is patched in version 4.9.11 by restricting the allowed system calls to a safer subset and additional descriptive error messaging.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: Just a Few Updates

July 17, 2025

The Xbox app on PC is showing Xbox Series X|S and Xbox One console games, and uh, even Xbox 360 and Windows Phone games — Why?

April 18, 2025

Jobs To Be Done Framework: Understanding the User’s Jobs

April 1, 2025

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-37092 – HPE StoreOnce Command Injection Remote Code Execution

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

CVE-2025-47301 – Cisco Router Unvalidated Redirect

CVE-2025-24206 – Apple Local Network Authentication Bypass

Stream-Omni: Simultaneous Multimodal Interactions with Large Language-Vision-Speech Model

JSON module scripts are now Baseline Newly available

CVE-2025-49131 – FastGPT Sandbox Syscall Escalation Vulnerability

CodeSOD: Just a Few Updates

The Xbox app on PC is showing Xbox Series X|S and Xbox One console games, and uh, even Xbox 360 and Windows Phone games — Why?

Jobs To Be Done Framework: Understanding the User’s Jobs

CVE-2025-37092 – HPE StoreOnce Command Injection Remote Code Execution

Related Posts