EUVD-2024-55661

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a human or an automated process such as a virus or bot. This could be used to cause a denial of service, compromise program...

PT-2026-60764

Name of the Vulnerable Software and Affected Versions HCL Aftermarket EPC affected versions not specified Description The web server has the HTTP OPTIONS method enabled. This method allows an attacker to retrieve a list of supported HTTP methods, which can be used to gather information about the...

PT-2026-60753

Name of the Vulnerable Software and Affected Versions HCL Aftermarket EPC affected versions not specified Description The application is susceptible to brute force, automated attacks, and account enumeration because it lacks a captcha implementation. A captcha is a security mechanism designed to...

EUVD-2025-209061

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts...

KIA Aftermarket Generic Smart Keyless Entry System 安全漏洞

KIA Aftermarket Generic Smart Keyless Entry System is an automotive smart door locking system from KIA, a South Korean company. A security vulnerability exists in the KIA Aftermarket Generic Smart Keyless Entry System that stems from the use of fixed learning code, which could lead to replay...