CVE-2024-48590

CVE-2024-48590 Vulnerability Disclosure: SSRF in Inflectra SpiraTeam 7.2.00 Description Inflectra SpiraTeam version 7.2.00 is vulnerable to Server-Side Request Forgery SSRF through the NewsReaderService component. Vulnerability Type Server-Side Request Forgery SSRF Vendor Inflectra Affected Produ...

Inflectra SpiraTeam PlanningBoard yAxisKey SQLi RCE

Authenticated PlanningBoardMoveItems yAxisKey SQL injection reaches REQUIREMENTRETRIEVECUSTOM EXEC@SQL and xpcmdshell Windows. !/usr/bin/env python3 -- coding: utf-8 -- """Inflectra SpiraTeam PlanningBoard yAxisKey SQLi to xpcmdshell RCE.""" from future import annotations import json import re...

Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xp_cmdshell RCE — Detect

Fingerprint / reachability check for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

EUVD-2025-7137

Malicious code in bioql PyPI...

EUVD-2025-7130

Malicious code in bioql PyPI...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

Exploit for Cross-site Scripting in Inflectra Spirateam

CVE-2024-48591 Vulnerability Disclosure: XSS in Inflectra S...

Exploit for Server-Side Request Forgery in Inflectra Spirateam

CVE-2024-48590 Vulnerability Disclosure: SSRF in Inflectra...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to a Server-Side Request Forgery (SSRF) via the NewsReaderService component. A remote attacker can send specially crafted requests to this service, forcing the server to make unintended requests, which can lead to the capture of authentication hashes from ...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48591

Inflectra SpiraTeam version 7.2.00 is vulnerable to Cross-Site Scripting (XSS) via the TestRuns section. An attacker can upload a specially crafted SVG file containing JavaScript; when a user views this file directly in their browser, the script executes. This vulnerability could potentially lead...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48591: Improper Neutralization of Input During Web Page Generation

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590: Server-Side Request Forgery (SSRF)

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

PT-2025-12352

Name of the Vulnerable Software and Affected Versions Inflectra SpiraTeam version 7.2.00 Description The issue allows a specially crafted SVG file to be uploaded, which can render and execute JavaScript when viewed directly, potentially leading to Cross Site Scripting XSS attacks. Recommendations...