10500 matches found
Improper Neutralization of Special Elements in Data Query Logic
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic in the findByMetadata function. An attacker can access data from other conversations by injecting RediSearch syntax into user-controlled metadata fields. Remediation Upgrad...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78357
Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A remote attacker can obtain sensitive information through the 'api vedo/chat' endpoint by manipulating the utente chat parameter. Recommendations At the moment, there is no informati...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
EUVD-2026-62481
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367: Authorization Bypass Through User-Controlled Key
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78356
Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A SQL Injection issue allows a remote attacker to execute arbitrary code. This is possible through the 'api vedo/chat' endpoint by manipulating the utente chat parameter...
CVE-2026-51366
A SQL Injection vulnerability exists in Bottinelli Informatica Vedo Suite v.1.2.5 . A remote attacker can exploit this flaw via the api_vedo/chat endpoint using the utente_chat parameter to achieve arbitrary code execution . The vulnerability is characterized by the improper neutralization of spe...
CVE-2026-51367
Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The issue is reachable via the api_vedo/chat endpoint by manipulating the utente_chat parameter. While the provided documents characterize this as an authorizat...
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-66636
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3...
EUVD-2026-60938
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-73187 WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-73187
The WordPress Sticky Chat Widget plugin (versions ≤ 1.4.2) contains an unauthenticated SQL Injection vulnerability, discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. CVSS 3.1 scores it 9.3 (Critical) for network-exploitable high confidentiality impact. CISA SSVC rates it automatable with ...
