64 matches found
CyberPower - SQL Injection
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. id: CVE-2024-32738 info: name: CyberPower - SQL Injection author: DhiyaneshDk severity: high description: | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3...
CyberPower < v2.8.3 - SQL Injection Detection
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to . !/usr/bin/env python3 -- coding: utf-8 -- """A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to .""" import re from kittysploit import from lib.protocols.http.httpclient import...
CyberPower - SQL Injection Detection
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.""" from kittysploit import from lib.protocols.http.httpclient import...
CyberPower - Missing Authentication Detection
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise pri.""" from...
CyberPower < v2.8.3 - SQL Injection Detection
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.""" from kittysploit import from lib.protocols.http.httpclient import...
CyberPower - SQL Injection Detection
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. !/usr/bin/env python3 -- coding: utf-8 -- """A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.""" from kittysploit import from lib.protocols.http.httpclient import...
EUVD-2023-43943
Malicious code in bioql PyPI...
CVE-2024-32735
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application...
VulnCheck KEV: CVE-2024-32735
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application...
VulnCheck KEV: CVE-2024-32736
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "queryutaskverbose" function within MCUDBHelper...
VulnCheck KEV: CVE-2024-32738
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "queryptasklean" function within MCUDBHelper...
VulnCheck KEV: CVE-2024-32737
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "querycontractresult" function within MCUDBHelper...
PowerPanel Enterprise MCUDBHelper Query Function Disclosure
The vulnerability of the queryptasklean function in the MCUDBHelper component of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to disclose...
PowerPanel Enterprise MCUDBHelper Disclosure
The vulnerability of the querycontractresult function in the MCUDBHelper component of the corporate version of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow...
PowerPanel Enterprise Authentication Bypass
The vulnerability of the corporate version of the PowerPanel Enterprise monitoring and power source management system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...
MCUDBHelper Component Disclosure Protected Information
The vulnerability of the queryutaskverbose function in the MCUDBHelper component of the PowerPanel Enterprise monitoring and power management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to disclose sensitive...
Cyber Power Systems PowerPanel security vulnerabilities
Cyber Power Systems PowerPanel Enterprise is a software program from Cyber Power Systems designed to provide real-time PUE, PUE trends, and total energy use trends. A security vulnerability exists in Cyber Power Systems PowerPanel versions 4.9.0 and earlier, which stems from the use of identical...
Cyber Power Systems PowerPanel Authorization Issue Vulnerability
Cyber Power Systems PowerPanel Enterprise is a software from Cyber Power Systems designed to provide real-time PUE, PUE trends, and total energy usage trends. An authorization issue vulnerability exists in Cyber Power Systems PowerPanel version 4.9.0 and prior versions, which arises from improper...
CVE-2024-32738
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "queryptasklean" function within MCUDBHelper...
CVE-2024-32737
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "querycontractresult" function within MCUDBHelper...