515 matches found
ESAFENET CDG - Arbitrary File Download
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...
CVE-2026-18859
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
EUVD-2026-53016
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859
CVE-2026-18859 affects ESAFENET CDG (up to 20260615). The vulnerability is tied to an unknown function in the file /CDGServer3/ukey/usbkey;logindojojs, where manipulation of the argument keyid leads to SQL injection. Attacks may be performed remotely, and a public exploit is reported as available...
CVE-2026-18859: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
PT-2026-67899
Name of the Vulnerable Software and Affected Versions ESAFENET CDG versions prior to 20260615 Description A remote SQL injection is possible due to improper handling of the keyid argument within an unknown function of the /CDGServer3/ukey/usbkey;logindojojs file. SQL injection is a technique wher...
ESAFENET CDG - Arbitrary File Download Detection
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. !/usr/bin/env python3 -- coding: utf-8 -- """ESAFENET CDG V3 and V5 has an arbitrary file downlo...
Esafenet CDG mysql - File Read Detection
CDGServer3 Unauthorized File Download vulnerability is detected. !/usr/bin/env python3 -- coding: utf-8 -- """CDGServer3 Unauthorized File Download vulnerability is detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...
ESAfenet CDG SQL Injection
The vulnerability of ESAFENET CDG’s software for encrypting electronic documents is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...
ESAfenet DSM Arbitrary Command Execution
The vulnerability of the ESAFENET DSM monitoring and network security management software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
CVE-2025-1840
A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...
CVE-2025-1844
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.20520250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack...
EUVD-2025-10401
Malicious code in bioql PyPI...
EUVD-2025-10402
Malicious code in bioql PyPI...
EUVD-2025-10414
Malicious code in bioql PyPI...