VMmanager HTTP Request Spoofing

The vulnerability in VMmanager 6 relates to inconsistent interpretation of HTTP requests. Exploitation of this vulnerability enables a remote attacker to manipulate and forward HTTP requests, bypassing security mechanisms...

DIAFAN.CMS Unrestricted File Upload Code Execution

The vulnerability in the DIAFAN.CMS content management system is related to unrestricted upload of malicious files. Exploitation of this vulnerability may allow a remote attacker to upload arbitrary files...

ReadyScript e-commerce management system Sequence Data Compromise

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

DIAFAN.CMS Authentication Bypass

The vulnerability in the DIAFAN.CMS content management system is related to the lack of authentication for a critical function. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

SimpleOne ITSM Cryptographic Signature Bypass Authentication

The vulnerability in the SimpleOne ITSM automation system relates to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to bypass the authentication process...

OLIMPOX Authentication Bypass Info Disclosure

The vulnerability of the software for the training and control system “OLIMPOX” is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information and modify data within...

CRM Platform Path Traversal DoS

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

Elph Mobile Improper Certificate Validation

The vulnerability in the Elph Mobile unified communications platform is related to improper validation of certificate authenticity. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality and integrity of protected information...

Shtab Project Access Control Unauthorized Access

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Elph Mobile Unverified Code Upload

The vulnerability in the Elph Mobile unified communications platform is related to code loading without proper integrity checks. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

Elph Mobile Unencrypted Data Transmission

The vulnerability in the Elph Mobile unified communications platform is related to the transmission of data in an open format. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

YouGile Project Management Service Random Number Generator Error

The vulnerability of the YouGile project management service is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

YouGile Project Management XSS

The vulnerability of the YouGile project management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

Centralized Printer MFP Supervision Unauthorized Access

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Test IT software testing management system Unauthorized Access

The vulnerability in Test IT’s software testing management system is related to improper handling of incoming requests. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

TOPAZ Metron PTS Time Synchronization Command Injection

The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...

Tekon SCADA Code Execution

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

Tekon SCADA Privilege Escalation

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Webasyst Shop-Script CMS Code Execution

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...