99 matches found
CVE-2025-14598
CVE-2025-14598 CVSS: 9.8 認証されていないリモートSQLインジェクションによるリモートコード実行 エグゼクティブサマリー BET e-Portal（学生情報および試験結果管理のために教育機関で広く導入されているソフトウェアソリューション）のログイン機能にSQLインジェクションの脆弱性が特定されました。この脆弱性により、認証されていない攻撃者がバックエンドのSQLクエリに干渉し、特定の構成ではリモートコード実行にまでエスカレーションする可能性がありました。この問題はCERT/CCを通じて報告・調整され、CVE-2025-14598 が割り当てられました。...
CVE-2026-41462
🚨 CVE-2026-41462 - ProjeQtor 未認証SQLインジェクション ProjeQtor ≤ 12.4.3 における重大な未認証SQLインジェクション 📌 概要 CVE-2026-41462 は、ProjeQtor プロジェクト管理ツールのログイン機能における重大な未認証SQLインジェクションの脆弱性です。 CVE ID ：CVE-2026-41462 影響を受けるバージョン ：ProjeQtor 7.0 から 12.4.3 パッチ適用バージョン ：12.4.4 深刻度 ：緊急 CVSS 9.8 種別 ：未認証スタック型SQLインジェクション 🛠️ エクスプロイト 使用方...
CVE-2024-49379
CVE-2024-49379에 대한 개념 증명PoC 이 저장소에는 UmbrelOS에서 확인된 치명적인 취약점에 대한 Python 기반 개념 증명PoC이 포함되어 있습니다. 이 취약점은 XSS교차 사이트 스크립팅를 허용하며, 특정 조건에서 RCE원격 코드 실행로 확대될 수 있습니다. 개요 CVE : CVE-2024-49379 심각도 : 치명적Critical 취약점 유형 : RCE원격 코드 실행로 이어지는 XSS교차 사이트 스크립팅 영향을 받는 소프트웨어 : 1.2.2 이전 버전의 UmbrelOS 발견자 : Peter Stöckli...
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...
CVE-2026-33920
CVE-2026-33920 affects the login functionality of Nozomi Networks Guardian/CMC (versions before 26.3.0 ). The root cause is a missing validation of the anti-CSRF token in both standard and SAML login flows. An attacker holding a valid account can coerce a victim into unknowingly authenticating wi...
EUVD-2026-72789
A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...
CVE-2025-69245
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2026-26722
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...
CVE-2026-26722
CVE-2026-26722 affects Key Systems Inc Global Facilities Management Software v.20230721a. A remote attacker can escalate privileges through the PIN component of the login functionality. Documents consistently indicate privilege escalation as the impact; CVSSv3.1 vectors imply Network access, Low ...
CVE-2025-14598 CVE-2025-14598
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database...
CVE-2024-39608
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability...
EUVD-2018-20422
Malware in sbrugna...
EUVD-2008-6901
Malware in sbrugna...
EUVD-2020-26940
Malware in sbrugna...
EUVD-2020-30210
Malware in sbrugna...