513 matches found
ESAFENET CDG - Arbitrary File Download
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...
CVE-2026-18859
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
EUVD-2026-53016
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2026-18859
CVE-2026-18859 affects ESAFENET CDG (up to 20260615). The vulnerability is tied to an unknown function in the file /CDGServer3/ukey/usbkey;logindojojs, where manipulation of the argument keyid leads to SQL injection. Attacks may be performed remotely, and a public exploit is reported as available...
CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
PT-2026-67899
Name of the Vulnerable Software and Affected Versions ESAFENET CDG versions prior to 20260615 Description A remote SQL injection is possible due to improper handling of the keyid argument within an unknown function of the /CDGServer3/ukey/usbkey;logindojojs file. SQL injection is a technique wher...
CVE-2026-18859: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
The vulnerability of the ESAFENET DSM software for monitoring and managing network security, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the ESAFENET DSM monitoring and network security management software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
The vulnerability of ESAFENET CDG’s software for encrypting electronic documents lies in the lack of protective measures for the SQL query structure, allowing attackers to execute malicious code remotely.
The vulnerability of ESAFENET CDG’s software for encrypting electronic documents is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...
CVE-2025-1840
A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...
CVE-2025-1844
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.20520250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack...
EUVD-2025-10402
Malicious code in bioql PyPI...
EUVD-2025-10414
Malicious code in bioql PyPI...
EUVD-2025-8834
Malicious code in bioql PyPI...
EUVD-2025-8663
Malicious code in bioql PyPI...
EUVD-2025-5850
Malicious code in bioql PyPI...