CVE-2026-80236

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...

CVE-2026-80235

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237 Thinking Software Technology｜Efence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-66346

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237

EFence , developed by Thinking Software Technology , suffers from an Arbitrary File Upload vulnerability. An authenticated remote attacker (low privileges) can upload and execute a web shell on the server, leading to arbitrary code execution with high impact on confidentiality, integrity, and ava...

CVE-2026-80236 Thinking Software Technology｜Efence - SQL Injection

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...

EUVD-2026-66345

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...

CVE-2026-80236

Efence , a product developed by Thinking Software Technology , is affected by a SQL Injection vulnerability. An unauthenticated remote attacker can access the file upload functionality to read database contents . The CVSS v3.1 score is 8.2 (HIGH) , reflecting network-reachable exploitation with l...

CVE-2026-80235 Thinking Software Technology｜EFence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80235

EFence by Thinking Software Technology is affected by an Arbitrary File Upload vulnerability that allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. The vulnerability is rated CRITICAL with a CVSS 3.1 base score of...

EUVD-2026-66344

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2014-4453

Malware in sbrugna...

The vulnerability of the input function in the EFence application system for managing corporate mobile devices allows a hacker to execute arbitrary commands and gain access to read, modify, or delete data.

The vulnerability of the input function in the EFence application’s corporate mobile device management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain access to read, modify, ...

CVE-2023-32754

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

CVE-2023-32754

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

CVE-2023-32754

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

CVE-2023-32754 Thinking Software Efence - SQL injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

Thinking Software Technology Efence SQL注入漏洞

Thinking Software Technology Efence is a mobile device management solution from China-based Thinking Software Technology. A SQL injection vulnerability exists in Thinking Software Technology Efence due to a login function that does not validate user-entered parameters...

CVE-2023-32754 Thinking Software Efence - SQL injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...