65 matches found
CVE-2019-8997
CVE-2019-8997 BlackBerry AtHoc 早于 7.6 HF-567 版本的管理系统(控制台)中存在一个 XML 外部实体注入(XXE)漏洞,攻击者可能通过在现有字段中输入恶意构造的 XML,从而读取应用服务器上的任意本地文件或向网络发出请求。 报告人 Nolan B. Kennedy nxkennedy 安全公告 http://support.blackberry.com/kb/articleDetail?articleNumber=000047227 https://nvd.nist.gov/vuln/detail/CVE-2019-8997 博文...
CVE-2026-18247
A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...
CVE-2026-18247
The CVE-2026-18247 describes a DOM-based XSS in BlackBerry AtHoc Web Portals (AtHoc IWS). Affected versions are earlier than 7.21 HF-734; exploitation could allow an attacker to perform actions in the victim’s session. Remediation is to upgrade to 7.21 HF-734 or later. The available connected doc...
CVE-2026-18247 DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals
A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...
PT-2026-70253
A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...
CVE-2025-12766
An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...
CVE-2025-12766
An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...
CVE-2025-12766
An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...
CVE-2025-12766 Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...
CVE-2025-12766 Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...
CVE-2025-12766
CVE-2025-12766 is a vulnerability in the Management Console of BlackBerry AtHoc (OnPrem) v7.21 where an insecure direct object reference (IDOR) could allow an attacker to gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System (IWS). Affected component:...
BlackBerry AtHoc 安全漏洞
BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.21, which stems from the presence of insecure direct object...
PT-2025-47468
An Insecure Direct Object Reference IDOR vulnerability in the Management Console of BlackBerry® AtHoc® OnPrem version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System IWS...
EUVD-2005-0189
Malware in sbrugna...
EUVD-2005-0188
Malware in sbrugna...
EUVD-2019-18384
Malware in sbrugna...
EUVD-2023-25690
Malicious code in bioql PyPI...
EUVD-2023-25689
Malicious code in bioql PyPI...