2689 matches found
EUVD-2025-36220
IDOR vulnerability in Educare ERP 1.0 2025-04-22 allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object...
CVE-2025-60982
IDOR vulnerability in Educare ERP 1.0 2025-04-22 allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object...
PT-2025-43998
Name of the Vulnerable Software and Affected Versions Educare ERP version 1.0 Description An IDOR Insecure Direct Object Reference vulnerability exists that allows unauthorized access to sensitive data through manipulated object references. Affected API endpoints do not enforce proper authorizati...
CVE-2025-60982
IDOR vulnerability in Educare ERP 1.0 2025-04-22 allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object...
EUVD-2025-35868
jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution RCE vulnerability via the jsherp function...
CVE-2025-11253
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
EUVD-2025-35805
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.This issue affects Netty ERP: before V.1.1000...
CVE-2025-11253
CVE-2025-11253 describes an SQL Injection in Netty ERP by Aksis Technology Inc. The issue arises from improper neutralization of special elements in SQL commands, enabling injection in versions prior to V.1.1000 . Multiple sources (NVD/Red Hat/CVE List/CNNVD, PT Security) corroborate the vulnerab...
CVE-2025-11253 SQLi in Aksis Technologies' Netty ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection. This issue affects Netty ERP: before V.1.1000...
PT-2025-43604
Name of the Vulnerable Software and Affected Versions Aksis Technology Inc. Netty ERP versions prior to V.1.1000 Description Netty ERP contains a flaw due to improper neutralization of special elements used in an SQL command, leading to a SQL Injection issue. This allows for the potential executi...
CVE-2025-9339
SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in user a malicious query injection. Potential exploitation is limited by the 20-character limit in form fields. Identified use case allows to delete tables with a name of maximum 6...
CVE-2025-9339
SIMPLE.ERP CVE-2025-9339 is a SQL injection in the Warehouse Document Filter form fields, affecting versions before [email protected]. The vulnerability allows a logged-in user to inject queries with up to 20 characters; a confirmed use case could delete tables whose names are at most 6 characters long....
Usta Aybs Interaktif 安全漏洞
Usta Aybs Interaktif is an Enterprise Resource Planning ERP management platform from Usta Turkey. A security vulnerability exists in Usta Aybs Interaktif versions 2024 through 28082025, which stems from authorization bypass and missing authorization, and could lead to forceful browsing, parameter...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
The CVE-2025-60830 entry affects redragon-erp v1.0, where a Shiro deserialization vulnerability arises from the default Shiro key. The issue enables deserialization-based impact on the application as described in multiple sources (Red Hat, NVD, CNNVD), with impact: partial integrity and low avail...