EUVD-2018-5727

Malware in sbrugna...

EUVD-2025-7149

Malicious code in bioql PyPI...

EUVD-2025-7152

Malicious code in bioql PyPI...

CVE-2025-26853

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema...

CVE-2025-26852

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...

CVE-2025-26853

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema...

CVE-2025-26852

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...

CVE-2025-26852

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...

CVE-2025-26853

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema...

CVE-2025-26852

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...

DESCOR INFOCAD 安全漏洞

DESCOR INFOCAD is a software for BIM and facilities management from DESCOR Inc. It is used for integrated management of building information modeling and facilities. A security vulnerability exists in DESCOR INFOCAD 3.5.1 and prior versions that originates from SQL injection...

DESCOR INFOCAD 安全漏洞

DESCOR INFOCAD is a software for BIM and facilities management from DESCOR Inc. It is used for integrated management of building information modeling and facilities. A security vulnerability exists in DESCOR INFOCAD 3.5.1 and prior versions that stems from an authorization mechanism flaw...

CVE-2025-26853

CVE-2025-26853 affects DESCOR INFOCAD 3.5.1 and earlier; the root cause is a broken authorization schema. Severity is CRITICAL (CVSS v3.1: 9.8–10.0, NETWORK attack vector, no user interaction). A fix is available in v3.5.2.0. Connected documents do not provide exploitation details; no explicit ex...

CVE-2025-26852

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...

CVE-2025-26853

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema...

CVE-2025-26853

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema...

CVE-2025-26852

CVE-2025-26852 affects DESCOR INFOCAD 3.5.1 and earlier; it is fixed in 3.5.2.0. The vulnerability enables SQL Injection with high impact (C/H, I/H, A/H per CVSS). Exploitation is network-based with no user interaction required. Remediation is to upgrade to 3.5.2.0 or later as indicated by the ve...

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

Design/Logic Flaw

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...