CVE-2026-8032: Use of Hard-coded Credentials

A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted element is an unknown function of the file /cdemos/echs/priv/echs.js. This manipulation of the argument ADMINKEY causes hard-coded credentials. The attack is possible to be carried out remotely. The exploit has...

addInvestor() Does Not Check Availability of investors_supply

Handle Meta0xNull Vulnerability details Impact When add investor, addInvestor does not check how many tokens is available from investorssupply. The total tokens allocated for Investors could more than investorssupply. Possible Attack Scenario: 1. Attacker who have Admin Private key call addInvest...