34 matches found
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
EUVD-2018-7677
Malware in sbrugna...
EUVD-2015-4005
Malware in sbrugna...
EUVD-2018-7678
Malware in sbrugna...
EUVD-2022-31197
Malicious code in bioql PyPI...
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
Code injection
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
CVE-2022-26643
The CVE-2022-26643 issue affects EasyIO CPT Graphics v0.8 and is described as allowing attackers to enumerate valid users in the application (user discovery). The connected documents confirm the affected product and the basic impact, but do not provide a detailed root cause, exploitable steps, af...
Johnson Controls EasyIO CPT Graphics 安全漏洞
Johnson Controls EasyIO CPT Graphics is a built-in graphics feature of an open source software programming tool from Johnson Controls, Inc. It is used to create graphic pages that can be viewed in a Web browser. A security vulnerability exists in Johnson Controls EasyIO CPT Graphics version v0.8...
CVE-2018-15820
EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...
CVE-2018-15820
EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...
CVE-2018-15819
EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...
CVE-2018-15819
EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...
Design/Logic Flaw
EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...
Design/Logic Flaw
EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...
CVE-2018-15820
CVE-2018-15820 affects EasyIO-30P controllers prior to version 2.0.5.27, where the web interface (dev.htm GDN parameter) is vulnerable to stored XSS. The vulnerability enables cross-site scripting within the device’s web UI and is listed with remote-exploit capability; a patch is noted by sources...
CVE-2018-15820
EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...