114 matches found
PT-2026-25666
Name of the Vulnerable Software and Affected Versions ZKTeco ZKBioSecurity version 3.0 Description The software contains hardcoded credentials within the Apache Tomcat server, enabling unauthenticated attackers to access the manager application. Attackers can use these credentials, found in the...
PT-2026-25728
Name of the Vulnerable Software and Affected Versions ZKTeco ZKBioSecurity version 3.0 Description The software contains a flaw that allows unauthenticated attackers to discover valid usernames. This is possible by submitting partial characters through the username parameter. Attackers can send...
EUVD-2020-9426
Malware in sbrugna...
EUVD-2022-39338
Malicious code in bioql PyPI...
EUVD-2022-39337
Malicious code in bioql PyPI...
CVE-2022-36634
An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5r allows attackers to arbitrarily create admin users via a crafted HTTP request...
CVE-2022-36635
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...
ZKTeco ZKBioSecurity Code Injection Vulnerability
ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A code injection vulnerability exists in ZKTeco ZKBioSecurity version 4.1.0, which stems from an incorrect operation of the parameter Schedule Name that can lead to cross-site scripting...
ZKTeco ZKBioSecurity Code Injection Vulnerability
ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A code injection vulnerability exists in ZKTeco ZKBioSecurity version 4.1.0, which stems from an incorrect operation of the parameter Department Name that can lead to cross-site scripting...
ZKTeco ZKBioSecurity Security Vulnerabilities
ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco ZKBioSecurity version 6.1.1 that originates from a vulnerability that allows an authenticated user to bypass password checks while exporting data from the application...
ZKTeco ZKBioSecurity Cross-Site Scripting Vulnerability
ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A cross-site scripting vulnerability exists in ZKTeco ZKBioSecurity version 6.1.1, which originates from a cross-site scripting attack that allows an authenticated user to inject malicious JavaScript code via...
ZKTeco ZKBioSecurity 安全漏洞
ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco ZKBioSecurity version 6.1.1, which stems from a directory traversal vulnerability in eventRecord...
ZKTeco ZKBioSecurity Security Vulnerabilities
ZKTeco ZKBioSecurity is a web-based all-in-one platform from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco ZKBioSecurity version 6.1.1 that originates from allowing an authenticated user to create a new administrator user without administrative user privileges...
ZKTeco ZKBioSecurity Access Control Error Vulnerability
ZKTeco ZKBioSecurity is a web-based all-in-one platform from ZKTeco China.An access control error vulnerability exists in ZKTeco ZKBioSecurity V5000 version 3.0.5r. The vulnerability stems from the presence of improper access control in the application, which can be exploited by an attacker to...
ZKTeco ZKBioSecurity SQL Injection Vulnerability
ZKTeco ZKBioSecurity is a web-based all-in-one platform from ZKTeco China.A SQL injection vulnerability exists in ZKteco ZKBioSecurity V5000 version 4.1.3, which stems from a lack of validation of external input SQL statements in component/baseOpLog.do. An attacker could exploit the vulnerability...
CVE-2022-36635
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...
CVE-2022-36635
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...
CVE-2022-36635
ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...
