25 matches found
CVE-2026-26416
CVE-2026-26416 授权绕过漏洞导致权限提升 漏洞概述 在 塔塔咨询服务公司（TCS）– Cognix Recon Client v3.0 中发现了一个权限提升漏洞。 该问题允许已认证用户通过构造恶意 API 请求，跨越既定角色边界提升权限。 该漏洞源于基于角色的访问控制（RBAC）逻辑中强制措施不足，使得可预测的对象标识符能够绕过授权验证机制。 技术分类（CWE） CWE-269 – 权限管理不当 CWE-863 – 授权不正确 CWE-639 – 通过用户控制的密钥绕过授权 受影响端点...
CVE-2026-26417
CVE-2026-26417 密码重置功能中的访问控制缺陷 漏洞摘要 在 塔塔咨询服务公司（TCS）– Cognix Recon Client v3.0 中发现了一个访问控制缺陷漏洞。 该问题允许已认证用户通过提交精心构造的 API 请求来重置任意用户账户的密码，而无需经过适当的授权验证。 该漏洞源于密码重置流程中所有权验证不足以及缺少授权检查。 技术分类（CWE） CWE-862 – 缺少授权 CWE-639 – 通过用户控制的密钥绕过授权 受影响端点 http://clientreconhost/trapeze-client/pwdMgmnt/resetPassword 供应商...
CVE-2026-26418
CVE-2026-26418 Web API 中缺失的身份验证与授权 漏洞摘要 在 塔塔咨询服务公司（TCS）– Cognix Recon Client v3.0 的 Web API 层中发现了一个缺失身份验证与授权的漏洞。 部分暴露的 API 端点未强制执行适当的身份验证和授权控制，允许在未经适当验证的情况下远程访问应用程序功能。 技术分类（CWE） CWE-306 – 关键功能缺少身份验证 CWE-862 – 缺少授权 受影响的端点 http://clientreconhost/reconciliations/ http://clientreconhost/Scheduler/...
EUVD-2025-1540
Malicious code in bioql PyPI...
CVE-2025-0202
A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTSSHOWFILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment...
SUSE CVE-2024-56649
In the Linux kernel, the following vulnerability has been resolved: net: enetc: Do not configure preemptible TCs if SIs do not support Both ENETC PF and VF drivers share enetcsetuptcmqprio to configure MQPRIO. And enetcsetuptcmqprio calls enetcchangepreemptibletcs to configure preemptible TCs...
CVE-2025-0202
A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTSSHOWFILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment...
CVE-2025-0202
CVE-2025-0202 concerns TCS BaNCS 10, where the vulnerability relates to the FILE PATH parameter in the REPORTS/REPORTS_SHOW_FILE.jsp file. The root cause is manipulation of the FilePath argument that can lead to file inclusion. The real existence of this vulnerability is still doubted according t...
CVE-2025-0202 TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion
A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTSSHOWFILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment...
CVE-2025-0202 TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion
A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTSSHOWFILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment...
PT-2025-3775 · Tata Consultancy Services · Tcs Bancs
Name of the Vulnerable Software and Affected Versions: TCS BaNCS version 10 Description: A vulnerability was found in TCS BaNCS, affecting an unknown part of the file /REPORTS/REPORTS SHOW FILE.jsp. The manipulation of the FilePath argument leads to file inclusion. The real existence of this...
Unspecified vulnerability in Linux kernel (CNVD-2025-01678)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue in the net/enetc driver that does not check for SI support when configuring preemptive TCs. No...
CVE-2022-48652 ice: Fix crash by keep old cfg when update TCs more than queues
In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by keep old cfg when update TCs more than queues There are problems if allocated queues less than Traffic Classes. Commit a632b2a4c920 "ice: ethtool: Prohibit improper channel config for DCB" already disallow setti...
myapp.tcs.com Cross Site Scripting vulnerability OBB-3494054
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-17953 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the BuildSetTcsFci function of protocolmiscbuilder.cpp, which could lead to a possible out of bounds read. This may result in local information disclosure without...
SUSE CVE-2020-24330
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed...
tcs-org.tw Cross Site Scripting vulnerability OBB-2897172
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tcsbiosciences.co.uk Cross Site Scripting vulnerability OBB-2144253
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CentOS 8 : trousers (CESA-2021:1627)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1627 advisory. - trousers: fails to drop the root gid privilege when no longer needed CVE-2020-24330 - trousers: tss user still has read and write access to the...
Denial of Service Vulnerability in Zhejiang Zhongcheng TCS-900 Security Instrumentation System
SCU9020 is the controller of TCS-900 Safety Instrumentation System of Zhejiang Zhongguang, which can be configured by the Ethernet communication module in TCS-900 Safety Instrumentation System. A denial of service vulnerability exists in the TCS-900 Safety Instrumented System of Zhejiang...