415 matches found
SysAid On-Prem <= 23.3.40 - XML External Entity
SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2775 info: name: SysAid On-Prem = 23.3.40 - XML External Entity...
SysAid On-Prem <= 23.3.40 - XML External Entity
SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2777 info: name: SysAid On-Prem = 23.3.40 - XML External Entity...
SysAid 20.4.74 - Cross-Site Scripting
SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter. id: CVE-2021-31862 info: name: SysAid 20.4.74 - Cross-Site Scripting author: jas37 severity: medium description: SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via...
SysAid Technologies 20.3.64 b14 - Cross-Site Scripting
SysAid 20.3.64 b14 contains a cross-site scripting vulnerability via the /KeepAlive.jsp?stamp= URI. id: CVE-2021-30049 info: name: SysAid Technologies 20.3.64 b14 - Cross-Site Scripting author: daffainfo severity: medium description: SysAid 20.3.64 b14 contains a cross-site scripting vulnerabilit...
SysAid On-Prem <= 23.3.40 - XML External Entity
SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2776 info: name: SysAid On-Prem = 23.3.40 - XML External Enti...
SysAid Server - Remote Code Execution
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023. id: CVE-2023-47246 info: name: SysAid Server - Remote Code Execution author: iamnoooob,rootxharsh,pdresearc...
SysAid Help Desk <15.2 - Local File Inclusion
SysAid Help Desk before 15.2 contains multiple local file inclusion vulnerabilities which can allow remote attackers to read arbitrary files via .. dot dot in the fileName parameter of getGfiUpgradeFile or cause a denial of service CPU and memory consumption via .. dot dot in the fileName paramet...
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
EUVD-2007-5239
Malware in sbrugna...
EUVD-2021-23314
Malware in sbrugna...
EUVD-2015-3081
Malware in sbrugna...
EUVD-2020-5440
Malware in sbrugna...
EUVD-2008-2176
Malware in sbrugna...
EUVD-2021-17408
Malware in sbrugna...
EUVD-2022-28257
Malicious code in bioql PyPI...
EUVD-2023-36483
Malicious code in bioql PyPI...
EUVD-2022-27939
Malicious code in bioql PyPI...
EUVD-2021-30836
Malicious code in bioql PyPI...
EUVD-2022-43615
Malicious code in bioql PyPI...
EUVD-2022-43614
Malicious code in bioql PyPI...