91 matches found
Vedo Suite 1.2.5 Insecure Direct Object Reference
Vedo Suite version 1.2.5 contains an insecure direct object reference vulnerability that allows an authenticated low-privileged user to access other users' private data by changing user-controlled API identifiers...
Vedo Suite 1.2.5 SQL Injection
Vedo Suite version 1.2.5 contains an authenticated SQL injection issue in its chat API endpoint that may permit operating-system command execution through an enabled SQL Server xpcmdshell configuration...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
EUVD-2026-62482
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367: Authorization Bypass Through User-Controlled Key
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The issue is reachable via the api_vedo/chat endpoint by manipulating the utente_chat parameter. While the provided documents characterize this as an authorizat...
PT-2026-78357
Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A remote attacker can obtain sensitive information through the 'api vedo/chat' endpoint by manipulating the utente chat parameter. Recommendations At the moment, there is no informati...
CVE-2026-51366
A SQL Injection vulnerability exists in Bottinelli Informatica Vedo Suite v.1.2.5 . A remote attacker can exploit this flaw via the api_vedo/chat endpoint using the utente_chat parameter to achieve arbitrary code execution . The vulnerability is characterized by the improper neutralization of spe...
CVE-2026-51366: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
EUVD-2026-62481
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78356
Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A SQL Injection issue allows a remote attacker to execute arbitrary code. This is possible through the 'api vedo/chat' endpoint by manipulating the utente chat parameter...
EUVD-2025-23887
Malicious code in bioql PyPI...
EUVD-2025-23879
Malicious code in bioql PyPI...