ZZ
Moonlight Bug Hunter
7 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-37103No exploit | Hardcoded Credential Exposure Allows Unauthorized Access in Web Interfacehewlett packard enterprise (hpe) · hpe networking instant on · CWE-798 | Critical9.8 | — | 1.0% | Jul 8, 2025 |
28Monitor | CVE-2025-37102No exploit | Authenticated Command Injection Vulnerability In Instant On Command Line Interfacehewlett packard enterprise (hpe) · hpe networking instant on · CWE-77 | High7.2 | — | 1.5% | Jul 8, 2025 |
19Monitor | CVE-2025-27085No exploit | Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductorarubanetworks · arubaos · CWE-22 | Medium4.9 | — | 0.6% | Apr 8, 2025 |
28Monitor | CVE-2025-27083No exploit | Authenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interfacearubanetworks · arubaos · CWE-77 | High7.2 | — | 1.1% | Apr 8, 2025 |
28Monitor | CVE-2025-27082No exploit | Authenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Writearubanetworks · arubaos · CWE-434 | High7.2 | — | 0.5% | Apr 8, 2025 |
24Monitor | CVE-2025-27079No exploit | Arbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI Interfacehewlett packard enterprise (hpe) · aos-10 ap · CWE-78 | Medium6.0 | — | 0.2% | Apr 8, 2025 |
26Monitor | CVE-2025-27078No exploit | Authenticated Remote Command Execution caused by Insecure Function Usage in System Binaryhewlett packard enterprise (hpe) · aos-10 ap · CWE-78 | Medium6.5 | — | 0.4% | Apr 8, 2025 |
- CVE-2025-3710339Monitor
Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface
CriticalCVSS 9.8No exploitEPSS 1%hewlett packard enterprise (hpe) · hpe networking instant onJul 8, 2025
- CVE-2025-3710228Monitor
Authenticated Command Injection Vulnerability In Instant On Command Line Interface
HighCVSS 7.2No exploitEPSS 1%hewlett packard enterprise (hpe) · hpe networking instant onJul 8, 2025
- CVE-2025-2708519Monitor
Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
MediumCVSS 4.9No exploitEPSS 0%arubanetworks · arubaosApr 8, 2025
- CVE-2025-2708328Monitor
Authenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
HighCVSS 7.2No exploitEPSS 1%arubanetworks · arubaosApr 8, 2025
- CVE-2025-2708228Monitor
Authenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
HighCVSS 7.2No exploitEPSS 0%arubanetworks · arubaosApr 8, 2025
- CVE-2025-2707924Monitor
Arbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI Interface
MediumCVSS 6.0No exploitEPSS 0%hewlett packard enterprise (hpe) · aos-10 apApr 8, 2025
- CVE-2025-2707826Monitor
Authenticated Remote Command Execution caused by Insecure Function Usage in System Binary
MediumCVSS 6.5No exploitEPSS 0%hewlett packard enterprise (hpe) · aos-10 apApr 8, 2025