131 matches found
CVE-2025-12461
CVE-2025-12461 affects Grupo Castilla Epsilon RH. The issue allows an attacker to access the unprotected path …/epsilonnet/License/About.aspx and disclose license details and product configuration, including installed modules. The root cause is lack of access control on that path. Impact is infor...
Grupo Castilla Epsilon RH 安全漏洞
Grupo Castilla Epsilon RH is a human resource management software from the Spanish company Grupo Castilla. A security vulnerability exists in Grupo Castilla Epsilon RH that stems from a failure to path... /epsilonnet/License/About.aspx to enforce access control, which could lead an attacker to...
CVE-2025-41028
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
EUVD-2025-35043
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028 SQL injection in Epsilon RH
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028 SQL injection in Epsilon RH
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...
CVE-2025-41028
CVE-2025-41028 affects the Epsilon RH software from Grupo Castilla. The vulnerability is a SQL Injection that allows an attacker to retrieve, create, update, and delete data by sending a POST request that uses the parameter sEstadoUsr in the endpoint /epsilonnetws/WSAvisos.asmx . This is document...
Grupo Castilla Epsilon RH 安全漏洞
Grupo Castilla Epsilon RH is a human resource management software from the Spanish company Grupo Castilla. A security vulnerability exists in Grupo Castilla Epsilon RH, which stems from incorrect manipulation of the parameter sEstadoUsr in the file /epsilonnetws/WSAvisos.asmx, which could lead to...
MAL-2025-46736 Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
Malicious code in benchmark-epsilon-runtime-authenticate-slow (npm)
The package benchmark-epsilon-runtime-authenticate-slow was found to contain malicious code...
Malicious code in private-epsilon-unix-long-kernel (npm)
The package private-epsilon-unix-long-kernel was found to contain malicious code...
Malicious code in star-abstract-epsilon-log-pipe (npm)
The package star-abstract-epsilon-log-pipe was found to contain malicious code...
Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)
The package benchmark-deserialize-mu-epsilon-shell was found to contain malicious code...
Malicious code in shell-easy-finally-water-epsilon (npm)
The package shell-easy-finally-water-epsilon was found to contain malicious code...
MAL-2025-19727 Malicious code in epsilon-tree-easy-decrypt-iota (npm)
The package epsilon-tree-easy-decrypt-iota was found to contain malicious code...
MAL-2025-33918 Malicious code in star-abstract-epsilon-log-pipe (npm)
The package star-abstract-epsilon-log-pipe was found to contain malicious code...