EUVD-2023-32363

Malicious code in bioql PyPI...

Code injection

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725: Unrestricted Upload of File with Dangerous Type

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

The General Bytes Crypto Application Server (CAS) version 20230120, distributed with BATM devices , contains a vulnerability (BATM-4780) that allows remote attackers to execute arbitrary Java code . The root cause is the unrestricted upload of Java applications to the /batm/app/admin/standalone/d...