Lucene search
+L

46 matches found

CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•14 views

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which could allow an attacker to access other user information by sending a POST request with web...

8.7CVSS6.4AI score0.00322EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•12 views

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to access other user information by sending a POST request containing the...

8.7CVSS6.4AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•14 views

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to access other users' information by sending a POST request containing th...

8.7CVSS6.5AI score0.00296EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/22 6:15 p.m.•36 views

CVE-2025-52085

An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries via a request to a backend API endpoint. Successful exploitation enables extraction of sensitive database information, including but not limited to, the database server banner a...

8.8CVSS0.00521EPSS
SaveExploits1References2
CVE
CVE
•added 2025/08/22 12:00 a.m.•63 views

CVE-2025-52085

The Yoosee smart home mobile application, version v6.32.4 , contains an SQL injection vulnerability (CWE-89). This flaw allows authenticated users to inject arbitrary SQL queries via a request to a backend API endpoint . Successful exploitation enables the extraction of sensitive database informa...

8.8CVSS7.2AI score0.00521EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/22 12:00 a.m.•5 views

CVE-2025-52085

An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries via a request to a backend API endpoint. Successful exploitation enables extraction of sensitive database information, including but not limited to, the database server banner a...

7.7AI score0.00521EPSS
SaveExploits1References2
Rows per page
Query Builder