Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:7 p.m.2 views

CVE-2026-4287

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

7.5CVSS6.8AI score0.00042EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/17 12:0 a.m.4 views

Tiandy Easy7 Integrated Management Platform SQL注入漏洞

Tiandy Easy7 Integrated Management Platform is a comprehensive video surveillance management platform developed by Tiandy Company in China. The version 7.17.0 of Tiandy Easy7 Integrated Management Platform contains a SQL injection vulnerability. This vulnerability arises from incorrect handling o...

7.5CVSS7.1AI score0.00042EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/16 11:33 p.m.1 views

CVE-2026-4287

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

7.5CVSS5.7AI score0.00042EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/03/16 11:33 p.m.30 views

CVE-2026-4287 Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

7.5CVSS0.00042EPSS
Exploits0References4
CVE
CVE
added 2026/03/16 11:33 p.m.7 views

CVE-2026-4287

Tiandy Easy7 Integrated Management Platform Endpoint (version 7.17.0) has a SQL injection in the /rest/devStatus/queryResources function when areaId is manipulated. The vulnerability is exploitable remotely; a public exploit reportedly exists. The vendor was contacted but did not respond. No reme...

7.5CVSS6.9AI score0.00042EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-1662

Malware in sbrugna...

6.8CVSS6.4AI score0.00738EPSS
Exploits1References9
Rows per page
Query Builder