Alertus Desktop Alert 5.4.98.0 Remote HTML Injection

Alertus Desktop Alert version 5.4.98.0 contains an unauthenticated remote HTML injection vulnerability due to certificate validation bypass. The proof of concept serves forged attacker-signed alert responses that inject HTML into the client and includes a browser protocol-handler demonstration...

Exploit for CVE-2026-38903

CVE-2026-38903 Alertus Desktop Alert: Unauthenticated Remo...

EUVD-2025-199016

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...

EUVD-2025-199012

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...

EUVD-2025-199015

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

CVE-2025-54341

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...

CVE-2025-54563

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...

CVE-2025-54347

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...

CVE-2025-54338

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

CVE-2025-54341: Use of Hard-coded Credentials

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...

CVE-2025-54338

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows an attacker to disclose user hashes . To remediate this issue, it is recommended to update the software to a version later than 6.1....

CVE-2025-54347: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...

CVE-2025-54347

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...

Desktop Alert PingAlert security vulnerability

Desktop Alert PingAlert is a network status monitoring tool from Desktop Alert USA. A security vulnerability exists in Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2, which originates from a directory traversal and could result in writing to arbitrary files...

CVE-2025-54338: Improper Access Control

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...

CVE-2025-54563

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...

CVE-2025-54563

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...

PT-2025-47971

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A security issue exists in the Application Server component of the software due to hard-coded configuration values. Recommendations Update Desktop Alert PingAlert to a versi...

CVE-2025-54563

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows for Remote Information Disclosure . To mitigate this risk, users are recommended to update to a version later than 6.1.1.2 .

PT-2025-47970

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description An Incorrect Access Control issue exists in the Application Server component of the software. This allows an attacker to disclose user hashes. Recommendations Update to a...