EUVD-2018-8078

Malware in sbrugna...

EUVD-2023-43024

Malicious code in bioql PyPI...

CVE-2023-39293

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system...

CVE-2023-39293

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system...

CVE-2023-39293

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system...

CVE-2023-39292

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations...

Sql injection

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations...

Command injection

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system...

CVE-2023-39292

Vulnerability summary (CVE-2023-39292): In MiVoice Office 400 SMB Controller, SQL Injection affects versions up to and including 1.2.5.23. The issue could allow an attacker to access sensitive data and perform arbitrary database/management operations. Root cause: SQL injection in the controller’s...

CVE-2023-39292

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations...

CVE-2023-39292

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensitive information and execute arbitrary database and management operations...

CVE-2023-39293

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system...

CVE-2023-39293

The CVE-2023-39293 entry concerns a Command Injection vulnerability in Mitel MiVoice Office 400 SMB Controller (affected up to version 1.2.5.23). Exploitation could allow an attacker to execute arbitrary commands in the system context via network access (no user interaction). Public disclosures a...

CVE-2023-39293

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system...

PT-2023-26875 · Mitel · Mivoice Office 400 Smb Controller

Name of the Vulnerable Software and Affected Versions: MiVoice Office 400 SMB Controller versions 1.2.5.23 and earlier Description: A Command Injection issue has been identified which could allow a malicious actor to execute arbitrary commands within the context of the system. Recommendations: Fo...

PT-2023-26874 · Mitel · Mivoice Office 400 Smb Controller

Name of the Vulnerable Software and Affected Versions: MiVoice Office 400 SMB Controller versions 1.2.5.23 and earlier Description: A SQL Injection issue has been identified which could allow a malicious actor to access sensitive information and execute arbitrary database and management operation...

Mitel MiVoice Office 400 web admin component cross-site scripting vulnerability

Mitel MiVoice Office 400 is a small and medium-sized business communications solution from Mitel Canada. The product includes features such as video conferencing, voice calls, etc. web admin is one of the web-based management components. A cross-site scripting vulnerability exists in the web admi...

CVE-2018-16226

A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 v8839a1 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack, due to insufficient validation for the start.asp page. A successful exploit could allow th...

Cross site scripting

A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 v8839a1 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack, due to insufficient validation for the start.asp page. A successful exploit could allow th...

CVE-2018-16226

Affected product: Mitel MiVoice Office 400 web admin component. Vulnerability: reflected cross-site scripting (XSS) due to insufficient validation on the start.asp page in versions R5.0 HF3 (v8839a1) and earlier. Impact: unauthenticated attacker could execute arbitrary scripts and access sensitiv...