EUVD-2023-27159

Malicious code in bioql PyPI...

EUVD-2024-50953

Malicious code in bioql PyPI...

EUVD-2024-53447

Malicious code in bioql PyPI...

EUVD-2022-48908

Malicious code in bioql PyPI...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

📄 GeoVision GV-ASManager 6.1.0.0 Information Disclosure

GeoVision GV-ASManager versions 6.1.0.0 and below suffer from an information disclosure vulnerability. Exploit Title: Information Disclosure in GeoVision GV-ASManager Google Dork: inurl:"ASWeb/Login" Date: 02-FEB-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage:...

Geovision GV-ASManager 6.1.10 Cross Site Request Forgery

Geovision GV-ASManager versions 6.1.10 and below suffer from a cross site request forgery vulnerability. CVE-2024-56901 CVE-2024-56901 - A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily...

CVE-2024-56903

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack...

CVE-2024-56902

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56902

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56903

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack...

PT-2025-3344 · Geovision · Geovision Gv-Asweb

Name of the Vulnerable Software and Affected Versions: Geovision GV-ASWeb versions 6.1.0.0 and earlier Description: The issue allows unauthorized attackers with low-level privileges to request information about other accounts via a crafted HTTP request. Recommendations: For Geovision GV-ASWeb...

CVE-2024-56902

Geovision GV-ASManager GV-ASWeb (versions 6.1.0.0 and earlier) have an information-disclosure flaw that can expose account information, including cleartext passwords. CVSS v3.1 base score 7.5 (HIGH): network exploit, no user interaction, no privileges required, with confidentiality impact. Public...

CVE-2024-56898

CVE-2024-56898 affects Geovision GV-ASWeb (v6.1.0.0 or earlier). The issue is a broken access control that lets a low-privilege user perform unauthorized actions, including creating, modifying, or deleting accounts, effectively escalating privileges. Public exploit details exist (PoC available at...

CVE-2024-56902

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, including cleartext password...

CVE-2024-56901

CVE-2024-56901 is a CSRF vulnerability in Geovision GV-ASWeb/ASManager web app (version 6.1.1.0 or less) that lets an attacker arbitrarily create Administrator accounts via a crafted GET request. The issue is documented to be exploitable in a chain with CVE-2024-56903, which describes the ability...

CVE-2024-56898

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts...

CVE-2024-56903

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against critical functionalities, such as account management. This vulnerability is used in chain with CVE-2024-56901 for a successful CSRF attack...