129 matches found
CVE-2025-12461 Unprotected access to parts of the application in Epsilon RH by Grupo Castilla
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...
Grupo Castilla Epsilon RH 安全漏洞
Grupo Castilla Epsilon RH is a human resource management software from the Spanish company Grupo Castilla. A security vulnerability exists in Grupo Castilla Epsilon RH that stems from a failure to path... /epsilonnet/License/About.aspx to enforce access control, which could lead an attacker to...
CVE-2025-41028
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028
CVE-2025-41028 affects the Epsilon RH software from Grupo Castilla. The vulnerability is a SQL Injection that allows an attacker to retrieve, create, update, and delete data by sending a POST request that uses the parameter sEstadoUsr in the endpoint /epsilonnetws/WSAvisos.asmx . This is document...
CVE-2025-41028 SQL injection in Epsilon RH
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028 SQL injection in Epsilon RH
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
EUVD-2025-35043
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
Grupo Castilla Epsilon RH 安全漏洞
Grupo Castilla Epsilon RH is a human resource management software from the Spanish company Grupo Castilla. A security vulnerability exists in Grupo Castilla Epsilon RH, which stems from incorrect manipulation of the parameter sEstadoUsr in the file /epsilonnetws/WSAvisos.asmx, which could lead to...
Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
MAL-2025-46736 Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)
The package benchmark-deserialize-mu-epsilon-shell was found to contain malicious code...
Malicious code in epsilon-tree-easy-decrypt-iota (npm)
The package epsilon-tree-easy-decrypt-iota was found to contain malicious code...
Malicious code in epsilon-test-slow-daemon-root (npm)
The package epsilon-test-slow-daemon-root was found to contain malicious code...
Malicious code in class-zeta-sun-epsilon-log (npm)
The package class-zeta-sun-epsilon-log was found to contain malicious code...
Malicious code in epsilon-scale-error-debug-container (npm)
The package epsilon-scale-error-debug-container was found to contain malicious code...
Malicious code in star-abstract-epsilon-log-pipe (npm)
The package star-abstract-epsilon-log-pipe was found to contain malicious code...
Malicious code in xi-epsilon-star-minify-eta (npm)
The package xi-epsilon-star-minify-eta was found to contain malicious code...