CVE-2024-42919

eScan Management Console Exploit Title : eScan Management Console - Incorrect Access Control Author : Jeyabalaji Affected Versions : 14.0.1400.2281 Tested on : Windows 11 CVE : CVE-2024-42919 Description: The Escan Management Console implements authentication mechanisms; however, the...

CVE-2023-31703

CVE-2023-31703 — Reflected XSS in eScan Management Console Overview CVE ID: CVE-2023-31703 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium Discovered By: Sahil Ojha Disclosu...

CVE-2023-33732

CVE-2023-33732 — Reflected Cross-Site Scripting in eScan Management Console -orange Overview CVE-2023-33732 is a Reflected Cross-Site Scripting XSS vulnerability discovered in the Microworld Technologies eScan Management Console , version 14.0.1400.2281. The flaw exists in the New Policy assignme...

CVE-2023-34835

CVE-2023-34835 — eScan Management Console: Reflected Cross-Site Scripting XSS Table of Contents Overview Vulnerability Details Affected Product Technical Analysis Proof of Concept Steps to Reproduce Impact Mitigation & Remediation References Disclaimer Overview A Reflected Cross-Site Scripting XS...

CVE-2023-33731

CVE-2023-33731 — eScan Management Console: Reflected Cross-Site Scripting XSS -orange Table of Contents Overview Vulnerability Details Severity & CVSS Score Affected Product Technical Analysis Proof of Concept Impact Mitigation & Remediation Disclosure Timeline References Author Overview A...

CVE-2023-33730

CVE-2023-33730 — eScan Management Console Privilege Escalation Severity: Critical CVE ID: CVE-2023-33730 Disclosed: 30 May 2023 Author: Sahil Ojha Table of Contents Overview Vulnerability Details Impact Technical Analysis Proof of Concept Remediation References Disclaimer Overview eScan Managemen...

CVE-2023-34837

CVE-2023-34837 — eScan Management Console: Reflected Cross-Site Scripting XSS Overview CVE-2023-34837 is a Reflected Cross-Site Scripting XSS vulnerability discovered in the Microworld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GrpPath POST...

CVE-2023-34836

CVE-2023-34836 — eScan Management Console 14.0.1400.2281: Reflected Cross-Site Scripting XSS Overview CVE ID: CVE-2023-34836 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium...

CVE-2023-34838

CVE-2023-34838 — eScan Management Console Stored XSS Overview Microworld Technologies eScan Management Console version 14.0.1400.2281 is vulnerable to a Stored Cross-Site Scripting XSS attack. An authenticated attacker with access to the role management feature can inject a malicious script into...

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

EUVD-2023-38877

Malicious code in bioql PyPI...

EUVD-2023-37885

Malicious code in bioql PyPI...

EUVD-2023-35998

Malicious code in bioql PyPI...

EUVD-2023-37886

Malicious code in bioql PyPI...

EUVD-2023-38878

Malicious code in bioql PyPI...

EUVD-2023-38879

Malicious code in bioql PyPI...

EUVD-2023-37884

Malicious code in bioql PyPI...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2023-34835

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable deletefile parameter...

CVE-2023-34837

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath...