Demtec Graphytics code injection vulnerability

Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of HTTP GET parameters in the /visualization file, which could lead to a cross-site scripting attack...

Ecoa Bas controller path traversal vulnerability

ECOA BAS controller is a smart lighting control solution. A directory traversal vulnerability exists in the ECOA BAS controller GET parameter handling, which can be exploited by attackers to delete arbitrary files on the affected device and cause a denial of service scenario...