CVE-2025-0001 authenticated arbitrary file read vulnerability

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability...

CVE-2025-0001

Summary: Abacus ERP versions older than 2024.210.16036, 2023.205.15833, and 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability . The issue requires valid credentials to read files on the system; no exploit details are provided in the documents. Remediation: upgrade ...

Abacus ERP 安全漏洞

Abacus ERP is a solution for managing and controlling commercial companies from Abacus Switzerland. A security vulnerability exists in Abacus ERP that stems from the presence of a certified arbitrary file read vulnerability, which can result in files being read arbitrarily...

CVE-2022-1065

A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions prior to R1 of 2022-01-15; v2021 versions prior to R4 of 2022-01-15; v2020 versions prior to R6 of 2022-01-15; v2019...

PT-2025-3738

Name of the Vulnerable Software and Affected Versions: Abacus ERP versions prior to 2024.210.16036 Abacus ERP versions prior to 2023.205.15833 Abacus ERP versions prior to 2022.105.15542 Description: The issue is an authenticated arbitrary file read vulnerability. This means that an attacker who...

Malicious code in abacus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11938 Malicious code in abacus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

CVE-2024-31802

CVE-2024-31802 affects DESIGNA ABACUS v18 and earlier. The root cause allows bypassing the payment process via a crafted QR code. A fix is available in v19+, with PT-Security recommending updating to a version that includes the patch; earlier guidance suggests restricting QR payments as a tempora...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

PT-2024-24212 · Unknown · Designa Abacus

Name of the Vulnerable Software and Affected Versions: DESIGNA ABACUS versions prior to v.19 Description: The issue allows an attacker to bypass the payment process via a crafted QR code. Recommendations: For versions prior to v.19, update to a version that includes a fix for this issue to preven...

CVE-2024-38540

CVE-2024-38540 concerns the Linux kernel bnxt_re driver. The vulnerability is due to undefined behavior triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0, which causes roundup_pow_of_two(hwq_attr->aux_stride) to run with a 0 va...

abacus.bates.edu Cross Site Scripting vulnerability OBB-3839831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview abacus-cmdline is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Command Injection

abacus-ext-cmdline is vulnerable to Command Injection. The vulnerability exists because user inputs are not properly validated which allows an attacker to inject maliciously crafted commands into the system...

CVE-2022-24431 Command Injection

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization...

abacus-ext-cmdline vulnerable to Command Injection

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization...

GHSA-M5V8-WPW4-RJ3X abacus-ext-cmdline vulnerable to Command Injection

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization...

npm abacus-ext-cmdline 操作系统命令注入漏洞

npm abacus-ext-cmdline is a command line execution utility from npm USA. An operating system command injection vulnerability exists in abacus-ext-cmdline, which stems from incorrect user input cleanup and is prone to command injection via the execute function...