EUVD-2023-32363

Malicious code in bioql PyPI...

CVE-2022-4980

General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...

CVE-2022-4980

General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...

CVE-2022-4980

General Bytes Crypto Application Server (CAS) versions 20201208 through 20220531.38 (backport) and 20220725.22 (mainline) are vulnerable to an authentication bypass in the admin web interface. An unauthenticated attacker can remotely invoke the URL used for default installation or first-admin cre...

CVE-2022-4980 General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via Default-installation/First-admin Page

General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...

PT-2025-38603

Name of the Vulnerable Software and Affected Versions General Bytes Crypto Application Server CAS versions 20201208 through 20220531.38 General Bytes Crypto Application Server CAS version 20220725.22 Description General Bytes Crypto Application Server CAS contains an authentication bypass in the...

CVE-2022-4980: Missing Authentication for Critical Function

General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...

CVE-2023-28725

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725: Unrestricted Upload of File with Dangerous Type

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

General Bytes Crypto Application Server 代码问题漏洞

General Bytes Crypto Application Server is a General Bytes company that provides powerful and simple browser-based administration. A security vulnerability exists in General Bytes Crypto Application Server CAS version 20230120. An attacker can exploit this vulnerability to execute arbitrary Java...

CVE-2023-28725

The General Bytes Crypto Application Server (CAS) version 20230120, distributed with BATM devices , contains a vulnerability (BATM-4780) that allows remote attackers to execute arbitrary Java code . The root cause is the unrestricted upload of Java applications to the /batm/app/admin/standalone/d...

The vulnerability of the CAS server of General Bytes Crypto Application Server, related to the manipulation of inter-site requests, allows a hacker to create a user with admin privileges and modify any data on the server at will.

The vulnerability of the CAS server of General Bytes Crypto Application Server is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to create a user with admin privileges and modify any data on the server at will...

Hackers Stole Crypto from Bitcoin ATMs by Exploiting Zero-Day Vulnerability

Bitcoin ATM manufacturer General Bytes confirmed that it was a victim of a cyberattack that exploited a previously unknown flaw in its software to plunder cryptocurrency from its users. "The attacker was able to create an admin user remotely via CAS administrative interface via a URL call on the...