DevExpress - Detect

Detect DevExpress based on the existence of its HTTP handler for serving images, scripts, and other resources to the client side. !/usr/bin/env python3 -- coding: utf-8 -- """Detect DevExpress based on the existence of its HTTP handler for serving images, scripts, and other resources .""" from...

PT-2026-86941

Уязвимость компонента Devexpress/Dashboard программной платформы «Проект-СМАРТ Про» связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить межсайтовые сценарные атаки XSS...

Devexpress/Dashboard Component XSS

The vulnerability of the Devexpress/Dashboard component of the “Project-SMARTPoint” software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2015-4689

Malware in sbrugna...

EUVD-2021-23085

Malware in sbrugna...

EUVD-2023-39810

Malicious code in bioql PyPI...

EUVD-2023-39812

Malicious code in bioql PyPI...

EUVD-2023-39809

Malicious code in bioql PyPI...

EUVD-2023-39811

Malicious code in bioql PyPI...

EUVD-2022-44672

Malicious code in bioql PyPI...

CVE-2022-41479

The DevExpress Resource Handler ASPxHttpHandlerModule in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References IDOR vulnerability which allows attackers to access the application...

CVE-2021-36483

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...

CVE-2023-35814

DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms...

CVE-2023-35817

DevExpress before 23.1.3 allows AsyncDownloader SSRF...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...

CVE-2023-35817

DevExpress before 23.1.3 allows AsyncDownloader SSRF...

CVE-2023-35817

DevExpress before 23.1.3 allows AsyncDownloader SSRF...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...