Lucene search
K

52 matches found

NVD
NVD
added 2025/07/21 6:15 a.m.2 views

CVE-2025-7918

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS0.00455EPSS
Exploits0References2
NVD
NVD
added 2025/07/21 6:15 a.m.3 views

CVE-2025-7917

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS0.01217EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/21 6:12 a.m.7 views

CVE-2025-7918 Simopro Technology|WinMatrix3 Web package - SQL Injection

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS7.9AI score0.00455EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/21 6:12 a.m.7 views

CVE-2025-7918 Simopro Technology|WinMatrix3 Web package - SQL Injection

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS0.00455EPSS
Exploits0References2
CVE
CVE
added 2025/07/21 6:12 a.m.17 views

CVE-2025-7918

WinMatrix3 Web package from Simopro Technology is affected by a SQL Injection vulnerability. The root cause is lack of input validation that allows unauthenticated attackers to inject SQL to read, modify, and delete database content. Affected component: WinMatrix3 Web package; impact includes hig...

9.8CVSS8AI score0.00455EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/21 6:8 a.m.10 views

CVE-2025-7917 Simopro Technology|WinMatrix3 Web package - Arbitrary File Upload

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS0.01217EPSS
Exploits0References2
CVE
CVE
added 2025/07/21 6:8 a.m.13 views

CVE-2025-7917

CVE-2025-7917 concerns the WinMatrix3 Web package from Simopro Technology. The connected sources describe an Arbitrary File Upload vulnerability in WinMatrix3 Web, enabling remote attackers with administrator privileges to upload and execute web shell backdoors, resulting in arbitrary code execut...

8.6CVSS7.7AI score0.01217EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/21 6:8 a.m.2 views

CVE-2025-7917 Simopro Technology|WinMatrix3 Web package - Arbitrary File Upload

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attackers with administrator privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS7.6AI score0.01217EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/21 5:57 a.m.2 views

CVE-2025-7916 Simopro Technology|WinMatrix3 - Insecure Deserialization

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

9.8CVSS8.4AI score0.04657EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/21 5:57 a.m.12 views

CVE-2025-7916 Simopro Technology|WinMatrix3 - Insecure Deserialization

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

9.8CVSS0.04657EPSS
Exploits0References2
CVE
CVE
added 2025/07/21 5:57 a.m.15 views

CVE-2025-7916

WinMatrix3 by Simopro Technology is affected by CVE-2025-7916: an insecure deserialization vulnerability that allows unauthenticated remote code execution via crafted serialized content. The issue stems from unsafe deserialization within the server component, enabling arbitrary code execution on ...

9.8CVSS7.8AI score0.04657EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.2 views

Simopro Technology WinMatrix3 安全漏洞

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a deserialization vulnerability that arises from unsafe deserialization of serialize...

9.8CVSS7.5AI score0.04657EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.4 views

PT-2025-30229 · Simopro Technology · Winmatrix3

Name of the Vulnerable Software and Affected Versions: WinMatrix3 affected versions not specified Description: WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability. This allows unauthenticated remote attackers to execute arbitrary code on the server by sending...

9.8CVSS7.4AI score0.04657EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.4 views

PT-2025-30230 · Simopro Technology · Winmatrix3 Web

Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: The WinMatrix3 Web package developed by Simopro Technology contains an arbitrary file upload issue. This allows remote attackers with administrator privileges to...

8.6CVSS7.3AI score0.01217EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.1 views

PT-2025-30240 · Simopro Technology · Winmatrix3 Web

Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: The WinMatrix3 Web package developed by Simopro Technology contains a Reflected Cross-site Scripting issue. This allows unauthenticated remote attackers to execute...

6.1CVSS6.7AI score0.00166EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.4 views

PT-2025-30235 · Simopro Technology · Winmatrix3 Web

Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: WinMatrix3 Web package developed by Simopro Technology contains a SQL Injection flaw. This allows unauthenticated remote attackers to inject arbitrary SQL commands,...

7.1CVSS7.4AI score0.00145EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

Simopro WinMatrix Web version 安全漏洞

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a SQL injection vulnerability that can be exploited by a remote attacker to read the...

7.1CVSS7.9AI score0.00145EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

Simopro Technology WinMatrix3 安全漏洞

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. A file upload vulnerability exists in Simopro Technology WinMatrix3, which stems from the application's lack of validation of...

8.6CVSS7.8AI score0.01217EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.1 views

Simopro Technology WinMatrix3 安全漏洞

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a cross-site scripting vulnerability that stems from the application's lack of...

6.1CVSS6AI score0.00166EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/21 12:0 a.m.4 views

PT-2025-30231

Name of the Vulnerable Software and Affected Versions WinMatrix3 Web package versions affected versions not specified Description WinMatrix3 Web package developed by Simopro Technology contains a SQL Injection vulnerability. This allows unauthenticated remote attackers to inject arbitrary SQL...

9.8CVSS7.6AI score0.00455EPSS
Exploits0References11
Rows per page
Query Builder