EUVD-2019-9226

Malware in sbrugna...

EUVD-2019-9227

Malware in sbrugna...

EUVD-2019-9228

Malware in sbrugna...

EUVD-2019-9225

Malware in sbrugna...

EUVD-2019-9224

Malware in sbrugna...

CVE-2019-19611

An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. Fixed in Release 10.24.11206.1...

CVE-2019-19610

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0...

CVE-2019-19612

An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting XSS. Fixed in Release 24.2020.20608.0...

CVE-2019-19614

An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed in Release 10.24.11206.1...

CVE-2019-19613

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request...

Halvotec Information Services RAQuest Cross-Site Scripting Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. A cross-site scripting vulnerability exists in Halvotec Information Services RAQuest version 10.23.10801.0. The vulnerability stems from a lack of proper validation ...

Halvotec Information Services RAQuest Input Validation Error Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An input validation error vulnerability exists in the login screen in Halvotec Information Services RAQuest version 10.23.10801.0. An attacker could exploit this...

Halvotec Information Services RAQuest Authorization Issues Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An authorization issue vulnerability exists in Halvotec Information Services RAQuest version 10.23.10801.0. The vulnerability stems from a lack of authentication...

Halvotec Information Services RAQuest Information Disclosure Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An information disclosure vulnerability exists in Halvotec Information Services RAQuest version 10.23.10801.0, which arises from an error in configuration or other...

CVE-2019-19613

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request...

CVE-2019-19613

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request...

CVE-2019-19610

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0...

CVE-2019-19612

An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting XSS. Fixed in Release 24.2020.20608.0...

CVE-2019-19610

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0...

CVE-2019-19612

An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting XSS. Fixed in Release 24.2020.20608.0...