107 matches found
Alertus Desktop Alert 5.4.98.0 Remote HTML Injection
Alertus Desktop Alert version 5.4.98.0 contains an unauthenticated remote HTML injection vulnerability due to certificate validation bypass. The proof of concept serves forged attacker-signed alert responses that inject HTML into the client and includes a browser protocol-handler demonstration...
Exploit for CVE-2026-38903
CVE-2026-38903 Alertus Desktop Alert: Unauthenticated Remo...
EUVD-2025-199012
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...
EUVD-2025-199015
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...
EUVD-2025-199016
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...
CVE-2025-54341
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...
CVE-2025-54563
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...
CVE-2025-54347
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...
CVE-2025-54338
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...
CVE-2025-54347
A Directory Traversal vulnerability exists in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw, categorized as CWE-22 , allows an attacker to write arbitrary files under certain conditions. Practical consequences include the ability for unauthorized ...
CVE-2025-54563: Improper Access Control
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...
CVE-2025-54347: Improper Limitation of a Pathname to a Restricted Directory
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...
CVE-2025-54338: Improper Access Control
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...
CVE-2025-54341: Use of Hard-coded Credentials
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values...
Desktop Alert PingAlert security vulnerability
Desktop Alert PingAlert is a network status monitoring tool from Desktop Alert USA. A security vulnerability exists in Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2, which stems from the presence of hard-coded configuration values...
PT-2025-47971
Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A security issue exists in the Application Server component of the software due to hard-coded configuration values. Recommendations Update Desktop Alert PingAlert to a versi...
CVE-2025-54347
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions...
CVE-2025-54563
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...
PT-2025-47968
Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description A Directory Traversal issue exists in the Application Server of the software, allowing an attacker to write arbitrary files under certain conditions. The issue enables...
CVE-2025-54563
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure...