CVE-2023-48645

An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance modu...

CVE-2023-48645

Summary: CVE-2023-48645 affects Archibus app for iOS v4.0.3. A SQL injection exists in the local database used for the Maintenance module’s “search work request” feature, allowing queries on the local DB. The issue arises as the app synchronizes a local DB with a web central server each time it o...

PT-2024-13617 · Archibus · Archibus

Name of the Vulnerable Software and Affected Versions: Archibus app version 4.0.3 for iOS Description: An issue was discovered in the Archibus app, which uses a local database synchronized with a Web central server instance. There is a SQL injection in the search work request feature in the...

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, allows a intruder to execute arbitrary code.

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, relates to buffer overflow and out-of-buffer conditions. Exploiting this vulnerability allows a malicious actor operating...

Icon Time Systems RTC-1000 Firmware 2.5.7458 - Cross-Site Scripting

Exploit Title: Icon Time Systems RTC-1000 alert"xss"; ========================================================== PROOF OF CONCEPT - With valid credentials that has permissions to modify the employee records, access the employeelist.html page via Lists-Employees...

CVE-2016-8803

The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...

CVE-2016-8803

The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...

Privilege escalation

The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...

CVE-2016-8803

The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage...

CVE-2016-8803

CVE-2016-8803 affects Huawei FusionStorage. The maintenance module in FusionStorage V100R003C30U1 allows a logged-in OS user to manipulate documents under specific rules to escalate to OS root privileges. Impact is privilege escalation with potential full control of the FusionStorage host; no exp...

CVE-2013-1818

maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors...