PT-2026-103594

Name of the Vulnerable Software and Affected Versions Inspur Haiyue HCM Cloud affected versions not specified Description An arbitrary file read issue exists in the '/api/model report/file/download' endpoint. Unauthenticated remote attackers can read arbitrary files by providing unvalidated path...

CVE-2024-50689

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the orgService API model...

CVE-2024-50686

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the commonService API model...

CVE-2024-50689

SunGrow iSolarCloud , an Android application for new energy power plant management, is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists within the orgService API model , potentially allowing unauthorized access or actions. This vulnerability affects versions released pri...

CVE-2024-50689

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the orgService API model...

CVE-2024-50685

The SunGrow iSolarCloud Android application, used for new energy power plant management, is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists within the powerStationService API model , potentially allowing unauthorized access to data. This vulnerability affects versions r...

i-doit SQL注入漏洞

i-doit is a configuration management database software from i-doit Inc. An SQL injection vulnerability exists in i-doit that originates from an information disclosure vulnerability contained in the ID parameter in isysapimodelcmdbobjectsbyrelation.class.php...