CVE-2026-28815

creationtimestamp| type| source ---|---|--- 2026-04-03 04:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikulke5wj2d 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec 2026-04-04 07:00:31+00:00| seen|...

CVE-2026-28815

A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1...

CVE-2023-28815

creationtimestamp| type| source ---|---|--- 2025-10-17 13:34:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115389765944283292...

CVE-2023-28815

CVE-2023-28815 concerns Hikvision’s iSecure Center product, where insufficient parameter validation enables a command-injection vulnerability. Affected software is described as released for China’s domestic market only, with no overseas release. The vulnerability could allow an attacker to gain p...

CVE-2024-28815

A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system...

CVE-2024-28815

A vulnerability exists in the BluStar component of Mitel InAttend (versions 2.6 SP4 through 2.7) and Mitel CMG (versions 8.5 SP4 through 8.6). This flaw could allow an attacker to gain access to sensitive information , modify system configurations , or perform arbitrary command execution within t...

CVE-2024-28815

A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system...

CVE-2022-28815

creationtimestamp| type| source ---|---|--- 2022-09-28 18:34:27+00:00| seen| https://t.me/cibsecurity/50596...

CVE-2022-28815

The CVE-2022-28815 entry describes a SQL injection vulnerability in the Sentilo Proxy component used by Carlo Gavazzi UWP3.0 and CPY Car Park Server (version 2.8.3). The underlying issue is unsafe SQL handling within the Sentilo Proxy, enabling an attacker to query other tables of the Sentilo ser...

CVE-2022-28815 SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy server was discovered to contain a SQL injection vulnerability allowing an attacker to query other tables of the Sentilo service...

CVE-2021-28815

CVE-2021-28815: Affected product is QNAP Systems Inc. myQNAPcloud Link running on QTS 4.5.3 (and QuTS hero h4.5.2; QuTScloud c4.5.4). The root cause is insecure storage of sensitive information, allowing remote attackers to read sensitive data through an unrestricted storage mechanism. CVSS detai...