226 matches found
📄 BigAnt Office Messenger 5.6.06 SQL Injection
BigAnt Office Messenger version 5.6.06 suffers from a remote SQL injection vulnerability. Exploit Title: BigAnt Office Messenger 5.6.06 - SQL Injection Date: 01.09.2025 Exploit Author: Nicat Abbasov Vendor Homepage: https://www.bigantsoft.com/ Software Link: https://www.bigantsoft.com/download.ht...
CVE-2024-54761
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'devcode' parameter...
CVE-2022-23346
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues...
CVE-2022-23345
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control...
CVE-2012-6273
SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU aka search user request...
CVE-2012-6274
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors...
CVE-2012-6275
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via 1 the filename header in an SCH request or 2 the userid component in a DUPF request...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Bigantsoft Bigant_Server
CVE-2025-0364: BigAntSoft BigAnt Server Account Registration B...
CVE-2025-0364
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...
CVE-2025-0364
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...
CVE-2025-0364 BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...
CVE-2025-0364
CVE-2025-0364 (BigAntSoft BigAnt Server) affects BigAntSoft BigAnt Server up to and including version 5.6.06. The vulnerability allows unauthenticated remote code execution via the default SaaS account registration, where an attacker can create an administrative user and then upload/execute arbit...
CVE-2025-0364 BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the...
BigAntSoft BigAnt Server 安全漏洞
BigAntSoft BigAnt Server is an instant messaging solution from BigAntSoft, Inc. A security vulnerability exists in BigAntSoft BigAnt Server version 5.6.06 and prior versions. An attacker can exploit this vulnerability to upload and execute arbitrary PHP code by creating an administrator user via...
BigAntSoft BigAnt office messenger SQL Injection Vulnerability
BigAntSoft BigAnt office messenger is a server/client instant messaging program for enterprise environments from BigAntSoft Australia. A SQL injection vulnerability exists in BigAntSoft BigAnt office messenger. The vulnerability can be exploited to conduct a SQL injection attack via the "devcode"...
CVE-2024-54761
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'devcode' parameter...
CVE-2024-54761
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'devcode' parameter...
CVE-2024-54761
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'devcode' parameter...
CVE-2024-54761
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the dev_code parameter. Evidence across multiple sources (CVE-2024-54761) shows remote SQL injection opportunity, with public write-ups and exploits illustrating a 5.6.06 target. Affected product/version details and the underlying ...