CVE-2022-32965

CVE-2022-32965 affects OMICARD EDM due to a hard-coded machine key in the server, enabling an unauthenticated remote attacker to send a serialized payload to execute arbitrary code, manipulate system data, and disrupt service. The PT-2022-21613 entry provides concrete details (affected software, ...

CVE-2022-32965 ITPison OMICARD EDM - Use of Hard-coded Credentials

OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service...

CVE-2022-32963 ITPison OMICARD EDM - Path Traversal-1

OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

CVE-2022-32963

CVE-2022-32963 concerns OMICARD EDM’s mail file relay function, exhibiting a path traversal vulnerability. An unauthenticated remote attacker can exploit this to bypass authentication and access arbitrary system files. The vulnerability is confirmed in multiple sources (NVD, CVE listing, PRION, C...

CVE-2022-32963

OMICARD EDM’s mail file relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

CVE-2022-35216

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

ITPison OMICARD EDM 信任管理问题漏洞

ITPison OMICARD EDM is a high-speed newsletter EDM marketing and distribution system from ITPison, China. A security vulnerability exists in ITPison OMICARD EDM. A remote attacker could exploit the vulnerability to send a serialized payload to the server using a machine key to execute arbitrary...

PT-2022-22634 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The mail image relay function in OMICARD EDM has a path traversal issue. This allows an unauthenticated remote attacker to bypass authentication and access arbitrary system files...

ITPison OMICARD EDM 路径遍历漏洞

ITPison OMICARD EDM is a high-speed email newsletter EDM marketing and distribution system from ITPison China. A security vulnerability exists in ITPison OMICARD EDM versions v5.8 to v6.0. The vulnerability stems from a path traversal in OMICARD EDM's Mail Image Forwarding feature, which can be...

PT-2022-21613 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue is related to a hard-coded machine key in OMICARD EDM. This allows an unauthenticated remote attacker to send a serialized payload to the server, which can result in the...

PT-2022-21612 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue is related to insufficient validation for user input in OMICARD EDM's API function. This allows an unauthenticated remote attacker to inject arbitrary SQL commands, which can ...

PT-2022-21611 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue concerns a path traversal vulnerability in OMICARD EDM's mail file relay function. This vulnerability can be exploited by an unauthenticated remote attacker to bypass...

edm-service.de Cross Site Scripting vulnerability OBB-2689695

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mitsubishi MELSEC Q03UDECPU PLC has a Logic Defect Vulnerability

Mitsubishi Electric Automation China Co., Ltd. is a wholly-owned enterprise in China invested by Mitsubishi Electric Corporation. It mainly produces mechanical appliances for power distribution including low-voltage circuit breakers, electromagnetic openers and closers, electrical processing...

EDM MAKER - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EDM MAKER published at the 'play' market has multiple vulnerabilities...

Dubstep and EDM Maker - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep and EDM Maker published at the 'play' market has multiple vulnerabilities...

Ultra EDM White Drum Tiles! - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ultra EDM White Drum Tiles! published at the 'play' market has multiple vulnerabilities...

EDM MAKER Dubstep Creator Free - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EDM MAKER Dubstep Creator Free published at the 'play' market has multiple vulnerabilities...

ButtonBass EDM Cube - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass EDM Cube published at the 'play' market has multiple vulnerabilities...

ButtonBass EDM Cube 2 - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass EDM Cube 2 published at the 'play' market has multiple vulnerabilities...