Lucene search
+L

182 matches found

Vulnrichment
Vulnrichment
added 2025/09/02 1:19 p.m.2 views

CVE-2024-12974 XSS in Akinsoft's ProKuaför

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

4.3CVSS5.8AI score0.00177EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/02 12:15 p.m.7 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00138EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/02 12:15 p.m.8 views

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS0.00177EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:52 a.m.5 views

CVE-2025-2414

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/09/02 11:52 a.m.19 views

CVE-2025-2414 OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS0.00325EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 11:52 a.m.5 views

CVE-2025-2414 OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:48 a.m.7 views

CVE-2025-0640

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01...

4.7CVSS5.4AI score0.00223EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/02 11:48 a.m.21 views

CVE-2025-0640

CVE-2025-0640 affects Akinsoft OctoCloud. It describes an authorization bypass via a user-controlled key that could lead to a resource leak exposure. Affected versions are s1.09.02 through before v1.11.01. The issue is rooted in an authorization mechanism that accepts a user-controlled key, enabl...

4.7CVSS5.4AI score0.00223EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:43 a.m.7 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00138EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/02 11:43 a.m.15 views

CVE-2024-12973

CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...

4.7CVSS5.8AI score0.00138EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 11:43 a.m.4 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00138EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:38 a.m.6 views

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS5.8AI score0.00177EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/02 11:38 a.m.5 views

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS5.8AI score0.00177EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/02 11:38 a.m.13 views

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS0.00177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.16 views

PT-2025-35567

Name of the Vulnerable Software and Affected Versions: Akinsoft ProKuafor versions s1.02.08 through versions prior to 1.02.08 Description: An improper restriction of excessive authentication attempts exists in Akinsoft ProKuafor, allowing for authentication bypass. Recommendations: Update Akinsof...

8.6CVSS6.5AI score0.00325EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.5 views

Akinsoft OctoCloud 安全漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A security bypass vulnerability exists in Akinsoft OctoCloud versions prior to s1.09.03 through v1.11.01, which can...

8.6CVSS6.9AI score0.00325EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.8 views

PT-2025-35548

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through 1.10.10 Description: Akinsoft OctoCloud is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

4.3CVSS5.8AI score0.00177EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.4 views

Akinsoft OctoCloud 访问控制错误漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A source validation error vulnerability exists in versions prior to Akinsoft OctoCloud s1.09.01 through v1.11.01,...

4.7CVSS6.7AI score0.00138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.8 views

PT-2025-35563

Name of the Vulnerable Software and Affected Versions Akinsoft OctoCloud versions s1.09.03 through 1.11.00 Description An improper restriction of excessive authentication attempts issue exists in Akinsoft OctoCloud, allowing for authentication bypass. Recommendations Update Akinsoft OctoCloud to...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.4 views

Akinsoft ProKuaför 跨站脚本漏洞

Akinsoft ProKuafor is an online appointment and client management platform from Akinsoft Turkey. Cross-site scripting vulnerability exists in Akinsoft ProKuafor versions prior to s1.02.07 to v1.02.08, no detailed vulnerability details are available at this time...

4.3CVSS6.4AI score0.00177EPSS
SaveExploits0References3
Rows per page
Query Builder