CVE-2025-5176 Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php sql injection

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can...

Realce Tecnologia Queue Ticket Kiosk 代码问题漏洞

Realce Tecnologia Queue Ticket Kiosk is a queue management software from Realce Tecnologia. A code issue vulnerability exists in Realce Tecnologia Queue Ticket Kiosk 20250517 and prior versions, which stems from an unrestricted upload due to the parameter files operation...

PT-2025-22918 · Realce Tecnologia · Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk versions up to 20250517 Description: A critical vulnerability affects the unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to SQL...

Realce Tecnologia Queue Ticket Kiosk 代码注入漏洞

Realce Tecnologia Queue Ticket Kiosk is a queue management software from Realce Tecnologia. A code injection vulnerability exists in Realce Tecnologia Queue Ticket Kiosk 20250517 and prior versions, which stems from a parameter Name/Usuário operation leading to cross-site scripting...

PT-2025-22921 · Realce Tecnologia · Realce Tecnologia Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk, affecting an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page...

PT-2025-22920 · Realce Tecnologia · Realce Tecnologia Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A critical vulnerability has been found in the Image File Handler component of the affected software, specifically in an unknown function of the file /adm/ajax.php. The...

Realce Tecnologia Queue Ticket Kiosk 注入漏洞

Realce Tecnologia Queue Ticket Kiosk is a queue management software from Realce Tecnologia. An injection vulnerability exists in Realce Tecnologia Queue Ticket Kiosk 20250517 and earlier versions, which stems from a parameter Usuário operation that results in SQL injection...

PT-2025-22919 · Realce Tecnologia · Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A vulnerability was found in the Admin Login Page component, specifically affecting the /adm/index.php file. The manipulation of the Usuário argument leads to cross-site...

Realce Tecnologia Queue Ticket Kiosk 代码注入漏洞

Realce Tecnologia Queue Ticket Kiosk is a queue management software from Realce Tecnologia. A code injection vulnerability exists in Realce Tecnologia Queue Ticket Kiosk 20250517 and prior versions, which stems from a parameter Usuário operation leading to cross-site scripting...

CVE-2024-37742

Insecure Access Control in Safe Exam Browser SEB = 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity. By exploiting this flaw, an attacker can bypass exam controls and gain an unfair...

CVE-2024-47947

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function...

CVE-2024-28140

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and...

CVE-2024-51829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in figoliquinn Mobile Kiosk mobile-kiosk allows Stored XSS.This issue affects Mobile Kiosk: from n/a through = 1.3.0...

CVE-2023-50159

In ScaleFusion Windows Desktop App agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-3786

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...

CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings ADB debug...

CVE-2023-51772

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a...