1151 matches found
PT-2025-10776
Name of the Vulnerable Software and Affected Versions: Zucchetti Ad Hoc Infinity version 2.4 Description: The issue is related to an improper check on the m cURL parameter, which allows an attacker to redirect the victim to an attacker-controlled website after authentication. Recommendations: For...
Zucchetti Ad Hoc Infinity security vulnerability
Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A security vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 that stems from improper checking of the mcURL parameter, which could result in a victim being redirected to an attacker-controlled website...
Zucchetti Ad Hoc Infinity cross-site scripting vulnerability
Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A cross-site scripting vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4, which originates from multiple components that allow an authenticated attacker to achieve remote code execution...
CVE-2024-51319
A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...
CVE-2024-51321: URL Redirection to Untrusted Site
In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...
PT-2025-10775
Name of the Vulnerable Software and Affected Versions: Zucchetti Ad Hoc Infinity version 2.4 Description: The issue allows an authenticated attacker to achieve Remote Code Execution. It involves a Cross Site Scripting vulnerability via the "API Endpoints:" /servlet/gsdm fsave htmltmp and...
CVE-2024-51322: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...
CVE-2024-51319: Improper Control of Filename for Include/Require Statement in PHP Program
A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...
CVE-2024-51320: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...
CVE-2024-51321
In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...
PT-2025-10774
Name of the Vulnerable Software and Affected Versions: Zucchetti Ad Hoc Infinity version 2.4 Description: A local file include issue in the /servlet/Report allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimg upload.jsp...
CVE-2024-51322
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...
CVE-2024-51320
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...
Zucchetti Ad Hoc Infinity cross-site scripting vulnerability
Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A cross-site scripting vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4, which originates from cross-site scripting in the /servlet/gsdmfsavehtmltmp and /servlet/gsdmbtlkopenfile components and could lead to remote code...
CVE-2024-51320
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...
CVE-2024-51320
A Cross Site Scripting (XSS) vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 , an ERP software. The flaw is located in the /servlet/gsdm_fsave_htmltmp and /servlet/gsdm_btlk_openfile components. An authenticated attacker can exploit this vulnerability to achieve Remote Code Executio...
PT-2025-2394 · Illumos · Illumos
Name of the Vulnerable Software and Affected Versions: illumos illumos-gate affected versions not specified Description: An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT AT INFINITY when it...
PT-2025-1782
Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.1 to Infinity 24.2.0 Description The issue is related to a Stored XSS problem with the profile. Recommendations For Pega Platform versions 8.1 to Infinity 24.2.0, update to a version newer than Infinity 24.2.0 to resol...
