Lucene search
+L

4084 matches found

RedhatCVE
RedhatCVE
added 2026/02/05 7:23 p.m.8 views

CVE-2025-5329

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection.This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did...

9.8CVSS5.6AI score0.00454EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/02/05 12:0 a.m.34 views

Unspecified Vulnerability in Delta Electronics DIAView

Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security vulnerability exists in Delta Electronics DIAView that stems from failure to authenticate critical functions. No details of the vulnerability are available at this time...

9.8CVSS5.8AI score0.00485EPSS
SaveExploits0
CNVD
CNVD
added 2026/02/05 12:0 a.m.10 views

Delta Electronics ASDA-Soft Stack Buffer Overflow Vulnerability

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics China. The Delta Electronics ASDA-Soft suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

9.8CVSS7.8AI score0.00532EPSS
SaveExploits0
CNVD
CNVD
added 2026/02/05 12:0 a.m.8 views

Delta Electronics DIAView Authentication Bypass Vulnerability

Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. Delta Electronics DIAView suffers from an authentication bypass vulnerability, no details of the vulnerability are provided at this time...

9.8CVSS5.7AI score0.00525EPSS
SaveExploits0
NVD
NVD
added 2026/02/04 2:16 p.m.7 views

CVE-2025-5329

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did...

9.8CVSS0.00454EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/04 1:29 p.m.8 views

CVE-2025-5329

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did...

9.8CVSS5.6AI score0.00454EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/04 1:29 p.m.5 views

CVE-2025-5329 SQLi in Martcode Software's Delta Course Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did...

9.8CVSS5.6AI score0.00454EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/04 1:29 p.m.6 views

EUVD-2025-206820

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection.This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did...

9.8CVSS5.6AI score0.00454EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/04 1:29 p.m.35 views

CVE-2025-5329 SQLi in Martcode Software's Delta Course Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did...

9.8CVSS0.00454EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.7 views

PT-2026-5909

Name of the Vulnerable Software and Affected Versions Delta Course Automation versions through 04022026 Description Delta Course Automation is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential unauthorized...

9.8CVSS5.7AI score0.00454EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.14 views

Martcode Delta Course Automation SQL注入漏洞

Martcode Delta Course Automation is an automated marketing and course management system developed by the Turkish company Martcode. Versions of Martcode Delta Course Automation prior to 04022026 contained a SQL injection vulnerability. This vulnerability stemmed from improper neutralization of...

9.8CVSS5.9AI score0.00454EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/03 9:19 p.m.8 views

CVE-2026-23515

Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated...

9.9CVSS5.9AI score0.04163EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 8:43 p.m.7 views

CVE-2026-23515

Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated...

9.9CVSS5.9AI score0.04163EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/02 8:43 p.m.88 views

CVE-2026-23515 RCE - Command Injection in Signal K set-system-time plugin

Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated...

9.9CVSS0.04163EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/02 8:43 p.m.7 views

CVE-2026-23515 RCE - Command Injection in Signal K set-system-time plugin

Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated...

9.9CVSS5.9AI score
SaveExploits0References4
OSV
OSV
added 2026/02/02 6:10 p.m.10 views

GHSA-P8GP-2W28-MHWG Signal K set-system-time plugin vulnerable to RCE - Command Injection

Summary A Command Injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled. Unauthenticated users can also exploit this vulnerability if security is disabled on the Signal K...

9.9CVSS6.4AI score0.04163EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/02/02 12:0 a.m.14 views

PT-2026-5713

Name of the Vulnerable Software and Affected Versions Signal K Server versions prior to 1.5.0 Signal K Set-System-Time plugin versions prior to 1.5.0 Description A command injection issue exists in the Signal K Server and its Set-System-Time plugin. Authenticated users with write permissions can...

9.9CVSS6.4AI score0.04163EPSS
SaveExploits1References15
CNVD
CNVD
added 2026/02/02 12:0 a.m.7 views

Delta Electronics DIAView Command Injection Vulnerability

Delta Electronics DIAView is an industrial configuration software from Delta Electronics, mainly used in SCADA systems. A command injection vulnerability exists in Delta Electronics DIAView, which can be exploited by an attacker to execute arbitrary commands on the system...

9.8CVSS7.4AI score0.01356EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/30 12:0 a.m.11 views

Delta Electronics DIAView Hard-coded JWT Secret Key (CVE-2025-62581)

Binary data deltaelectronicsdiaviewcve-2025-62581.nbin...

9.8CVSS5.9AI score0.00525EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2026/01/28 12:0 a.m.11 views

Delta Electronics DIAView Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAView. User interaction is required to exploit this vulnerability in that the target must open and run a malicious project. The specific flaw exists within the DIAView script...

7.8CVSS6.3AI score0.01356EPSS
SaveExploits0References1
Rows per page
Query Builder