AxxonSoft Axxon Next - Local File Inclusion

AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. id: CVE-2018-7467 info: name: AxxonSoft Axxon Next - Local File Inclusion author: 0xAkoko severity: high description: AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. impact: | An attacker can read...

CVE-2026-121024

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

CVE-2026-121021

Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...

EUVD-2026-115711

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

CVE-2026-121022

The AxxonSoft Axxon One web client (versions prior to 3.0.0 on Windows and Linux) is vulnerable to a Use of Default Password (CWE-1393) . The software fails to enforce a mandatory password change upon first login, allowing a remote unauthenticated attacker to access the built-in administrator acc...

AxxonSoft Axxon Next - Local File Inclusion Detection

AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """AxxonSoft Axxon Next suffers from a local file inclusion vulnerability.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

PT-2025-37041

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One versions prior to 2.0.3 Description: Insufficient session expiration in the Web Admin Panel allows a local or remote authenticated attacker to retain access with removed privileges via continued use of an unexpired session...

CVE-2025-10220: Use of Unmaintained Third Party Components

Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...

AxxonSoft AxxonOne security vulnerabilities

AxxonSoft AxxonOne is a video surveillance and security management software from AxxonSoft Ireland. A security vulnerability exists in AxxonSoft AxxonOne version 2.0.1 and prior versions, which stems from the exposure of sensitive information by the Diagnostic Dump component, which could lead to...

AxxonSoft Axxon Next Path Traversal

The vulnerability of AxxonSoft Axxon Next video management software is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

AxxonSoft Axxon Next Directory Traversal

Title AxxonSoft Axxon Next - AxxonSoft Client Directory Traversal via an initial /css//..%2f substring in a URI. CVE-2018-7467 Vulnerability Type Directory Traversal via an initial /css//..%2f substring in a URI Vendor of Product AxxonSoft Client Affected Product Code Base Axxon Next Affected...

Directory traversal

AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI...

CVE-2018-7467

AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI...

CVE-2018-7467

AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI...

CVE-2018-7467

AxxonSoft Axxon Next is affected by a directory traversal vulnerability exposed via a URI containing /css//..%2f. The connected sources consistently refer to CVE-2018-7467 as a directory traversal issue (also described as local file inclusion in some templates) affecting the Axxon Next client web...