EUVD-2022-48430

Malicious code in bioql PyPI...

CVE-2024-44757

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44756

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

CVE-2024-44757

The NUS-M9 ERP Management Software v3.0.0 contains an arbitrary file download vulnerability in the /Basics/DownloadInpFile component. An attacker can exploit this flaw by sending a crafted interface request to download arbitrary files and gain access to sensitive information . While no patch is c...

PT-2024-31236 · Unknown · Nus-M9 Erp Management

Name of the Vulnerable Software and Affected Versions: NUS-M9 ERP Management Software version 3.0.0 Description: An arbitrary file download issue in the /Basics/DownloadInpFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44756: Improper Neutralization of Special Elements used in an SQL Command

NUS-M9 ERP Management Software v3.0.0 was discovered to contain a SQL injection vulnerability via the usercode parameter at /UserWH/checkLogin...

PT-2024-31235

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description The issue is a SQL injection vulnerability that can be exploited via the usercode parameter at the "/UserWH/checkLogin" API endpoint. This allows for potential unauthorized access to...

CVE-2024-44757: Improper Control of Generation of Code

An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

PT-2024-31237

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description An arbitrary file upload issue in the /Production/UploadFile component allows attackers to execute arbitrary code by uploading crafted files. Recommendations For NUS-M9 ERP Management...

CVE-2024-44758: Improper Control of Generation of Code

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44759: Improper Neutralization of Special Elements used in an OS Command

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

PT-2024-31238

Name of the Vulnerable Software and Affected Versions NUS-M9 ERP Management Software version 3.0.0 Description An arbitrary file download issue in the /Doc/DownloadFile component allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

SQL Injection Vulnerability in the ERP Management Cloud Platform for Moon Clubs of Wuhan Jin Tongfang Technology Co. Ltd (CNVD-2024-22433)

Wuhan Jin Tongfang Technology Co., Ltd. is a company that provides informatization solutions for the mother and child service industry. There is a SQL injection vulnerability in the ERP management cloud platform of Wuhan Golden Tongfang Technology Co., Ltd. which can be exploited by attackers to...

PT-2023-14707

Name of the Vulnerable Software and Affected Versions znfit Home improvement ERP management system versions V42 through V50 20220207 Description The issue allows attackers to execute arbitrary SQL commands via the userCode parameter to the WeChat applet, potentially leading to unauthorized data...

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

CVE-2022-45564: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...