Lucene search
+L

185 matches found

Cvelist
Cvelist
added 2025/09/02 1:19 p.m.19 views

CVE-2024-12974 XSS in Akinsoft's ProKuaför

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

4.3CVSS0.00191EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 1:19 p.m.6 views

CVE-2024-12974 XSS in Akinsoft's ProKuaför

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/02 1:19 p.m.18 views

CVE-2024-12974

CVE-2024-12974 : Akinsoft ProKuaför contains an XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are s1.02.07 up to, but not including, v1.02.08. Red Hat, CNVD, CNVD-like entries, and PTSecurity references corroborate this issue and specif...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 1:19 p.m.10 views

CVE-2024-12974

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/02 12:15 p.m.13 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/02 12:15 p.m.13 views

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS0.00191EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:52 a.m.9 views

CVE-2025-2414

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS5.4AI score0.00349EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/09/02 11:52 a.m.28 views

CVE-2025-2414 OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS0.00349EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 11:52 a.m.9 views

CVE-2025-2414 OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS5.4AI score0.00349EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:48 a.m.10 views

CVE-2025-0640

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01...

4.7CVSS5.4AI score0.00241EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/02 11:48 a.m.30 views

CVE-2025-0640

CVE-2025-0640 affects Akinsoft OctoCloud. It describes an authorization bypass via a user-controlled key that could lead to a resource leak exposure. Affected versions are s1.09.02 through before v1.11.01. The issue is rooted in an authorization mechanism that accepts a user-controlled key, enabl...

4.7CVSS5.4AI score0.00241EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:43 a.m.9 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/02 11:43 a.m.5 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/02 11:43 a.m.21 views

CVE-2024-12973

CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/02 11:38 a.m.10 views

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/09/02 11:38 a.m.21 views

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS0.00191EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 11:38 a.m.9 views

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.11 views

PT-2025-35565

Name of the Vulnerable Software and Affected Versions: Akinsoft ProKuaför versions prior to 1.02.08 Description: Akinsoft ProKuaför is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.11 views

PT-2025-35548

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through 1.10.10 Description: Akinsoft OctoCloud is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

4.3CVSS5.8AI score0.00191EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.14 views

PT-2025-35550

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.02 through v1.11.00 Description: An authorization bypass exists due to a user-controlled key, potentially leading to resource leak exposure in Akinsoft OctoCloud. Recommendations: Update Akinsoft OctoCloud to...

4.7CVSS6.4AI score0.00241EPSS
SaveExploits0References6
Rows per page
Query Builder