Mitsubishi Electric FA Products Authentication Bypass By Capture-Replay (CVE-2022-25159)

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote unauthenticated attacker to login to the product by replay attack. This plugin only works with...

Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25158)

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext. This...

CVE-2022-28871

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28871

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28871 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28871

CVE-2022-28871 affects F-Secure Atlant; the fsicapd component used during scanning larger packages/fuzzed files can consume excessive memory and crash the scanning engine. Exploitation is described as remote. The available connected sources confirm the DoS impact but do not specify affected versi...

PT-2022-19275 · F Secure · F-Secure Atlant

Name of the Vulnerable Software and Affected Versions: F-Secure Atlant affected versions not specified Description: A Denial-of-Service DoS issue was discovered in the fsicapd component used in certain F-Secure products. When scanning larger packages or fuzzed files, the component consumes too mu...

CVE-2022-28871: Allocation of Resources Without Limits or Throttling

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28417: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletephase...

PT-2022-18770

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The issue is related to the "/reps/classes/Master.php?f=delete estate" API endpoint. Recommendations For Simple...

PT-2022-19009

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19007

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

PT-2022-19008

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the /hocms/classes/Master.php API endpoint, specifically...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

PT-2022-19006

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description A SQL injection issue was found in the Home Owners Collection Management System. The vulnerability can be exploited via the "/hocms/classes/Master.php?f=delete member" API...

PT-2022-18767

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/reps/classes/Master.php?f=delete amenity" API endpoint. Recommendations For Simple Real Estate Portal...

CVE-2022-28414: Improper Neutralization of Special Elements used in an SQL Command

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

PT-2022-18768

Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Master.php API endpoint, specifically when the f paramet...

PT-2022-19004

Name of the Vulnerable Software and Affected Versions Car Driving School Managment System version 1.0 Description A SQL injection issue was found in the Car Driving School Managment System. The vulnerability can be exploited via the /cdsms/classes/Master.php API endpoint, specifically when the f...