7 matches found
EUVD-2023-27003
Malicious code in bioql PyPI...
EUVD-2021-31011
Malicious code in bioql PyPI...
CVE-2023-22901
CVE-2023-22901 concerns the ChangingTec MOTP system, which is reported to have a path traversal vulnerability. The affected component is the MOTP system itself, with the root cause described as a path traversal flaw that could allow a remote attacker with administrator privileges to access arbitr...
PT-2023-18764
Name of the Vulnerable Software and Affected Versions ChangingTec MOTP system affected versions not specified Description The ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system file...
CVE-2023-22901: Improper Limitation of a Pathname to a Restricted Directory
ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files...
Sql injection
Changing MOTP Mobile One Time Password system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication...
PT-2021-24055
Name of the Vulnerable Software and Affected Versions: MOTP system affected versions not specified Description: The issue concerns insufficient validation for user input in a specific function parameter of the MOTP system. This allows an attacker within the local area network to perform a SQL...