CVE-2025-0001 authenticated arbitrary file read vulnerability

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability...

CVE-2025-0001 authenticated arbitrary file read vulnerability

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability...

Abacus ERP 安全漏洞

Abacus ERP is a solution for managing and controlling commercial companies from Abacus Switzerland. A security vulnerability exists in Abacus ERP that stems from the presence of a certified arbitrary file read vulnerability, which can result in files being read arbitrarily...

CVE-2022-1065

A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions prior to R1 of 2022-01-15; v2021 versions prior to R4 of 2022-01-15; v2020 versions prior to R6 of 2022-01-15; v2019...

PT-2025-3738

Name of the Vulnerable Software and Affected Versions: Abacus ERP versions prior to 2024.210.16036 Abacus ERP versions prior to 2023.205.15833 Abacus ERP versions prior to 2022.105.15542 Description: The issue is an authenticated arbitrary file read vulnerability. This means that an attacker who...

Malicious code in abacus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11938 Malicious code in abacus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

PT-2024-24212 · Unknown · Designa Abacus

Name of the Vulnerable Software and Affected Versions: DESIGNA ABACUS versions prior to v.19 Description: The issue allows an attacker to bypass the payment process via a crafted QR code. Recommendations: For versions prior to v.19, update to a version that includes a fix for this issue to preven...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

CVE-2024-31802

The software DESIGNA ABACUS versions prior to v.19 (including v.18 and before ) is vulnerable to a payment process bypass. An attacker can exploit this by using a crafted QR code . To mitigate this risk, users are recommended to update to a version that includes a fix (v.19 or later). As a tempor...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

CVE-2024-38540

The Linux kernel contains a vulnerability in the bnxt_re driver where the function bnxt_qplib_alloc_init_hwq triggers undefined behavior . This occurs when the function is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0, leading to an invalid call to roundup_pow_of_two(0)...

abacus.bates.edu Cross Site Scripting vulnerability OBB-3839831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview abacus-cmdline is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Command Injection

abacus-ext-cmdline is vulnerable to Command Injection. The vulnerability exists because user inputs are not properly validated which allows an attacker to inject maliciously crafted commands into the system...

CVE-2022-24431 Command Injection

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization...

abacus-ext-cmdline vulnerable to Command Injection

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization...

GHSA-M5V8-WPW4-RJ3X abacus-ext-cmdline vulnerable to Command Injection

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization...

npm abacus-ext-cmdline 操作系统命令注入漏洞

npm abacus-ext-cmdline is a command line execution utility from npm USA. An operating system command injection vulnerability exists in abacus-ext-cmdline, which stems from incorrect user input cleanup and is prone to command injection via the execute function...