CVE-2025-7917

CVE-2025-7917 concerns the WinMatrix3 Web package from Simopro Technology. The connected sources describe an Arbitrary File Upload vulnerability in WinMatrix3 Web, enabling remote attackers with administrator privileges to upload and execute web shell backdoors, resulting in arbitrary code execut...

CVE-2025-7917 Simopro Technology｜WinMatrix3 Web package - Arbitrary File Upload

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2025-7917 Simopro Technology｜WinMatrix3 Web package - Arbitrary File Upload

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2025-7916 Simopro Technology｜WinMatrix3 - Insecure Deserialization

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

CVE-2025-7916

WinMatrix3 by Simopro Technology is affected by CVE-2025-7916: an insecure deserialization vulnerability that allows unauthenticated remote code execution via crafted serialized content. The issue stems from unsafe deserialization within the server component, enabling arbitrary code execution on ...

CVE-2025-7916 Simopro Technology｜WinMatrix3 - Insecure Deserialization

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

CVE-2025-7919: Exposure of Sensitive Information to an Unauthorized Actor

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2025-30240 · Simopro Technology · Winmatrix3 Web

Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: The WinMatrix3 Web package developed by Simopro Technology contains a Reflected Cross-site Scripting issue. This allows unauthenticated remote attackers to execute...

Simopro Technology WinMatrix3 安全漏洞

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a deserialization vulnerability that arises from unsafe deserialization of serialize...

CVE-2025-7916: Deserialization of Untrusted Data

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

PT-2025-30231

Name of the Vulnerable Software and Affected Versions WinMatrix3 Web package versions affected versions not specified Description WinMatrix3 Web package developed by Simopro Technology contains a SQL Injection vulnerability. This allows unauthenticated remote attackers to inject arbitrary SQL...

PT-2025-30229 · Simopro Technology · Winmatrix3

Name of the Vulnerable Software and Affected Versions: WinMatrix3 affected versions not specified Description: WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability. This allows unauthenticated remote attackers to execute arbitrary code on the server by sending...

PT-2025-30230 · Simopro Technology · Winmatrix3 Web

Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: The WinMatrix3 Web package developed by Simopro Technology contains an arbitrary file upload issue. This allows remote attackers with administrator privileges to...

Simopro Technology WinMatrix3 安全漏洞

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a SQL injection vulnerability that stems from the application's lack of validation o...

CVE-2025-7920: Improper Neutralization of Input During Web Page Generation

WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

PIA Core Technology Unauthenticated Access

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

DEBIAN-CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

CVE-2025-7798

A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2. This affects an unknown part of the file /admin/system/structure/getdirectorydata/web/baseinfo/companyManage. The manipulation of the argument...

CVE-2025-7798 Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System companyManage sql injection

A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2. This affects an unknown part of the file /admin/system/structure/getdirectorydata/web/baseinfo/companyManage. The manipulation of the argument...

CVE-2025-7798

CVE-2025-7798 affects Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System versions up to 8.2. The vulnerability is a SQL injection in the file path /admin/system/structure/getdirectorydata/web/baseinfo/companyManage, triggered by manipulating the Struc ture_ID argumen...