99 matches found
CVE-2026-96515
CVE-2026-96515: выполнение команды от имени root с аутентификацией в Netlink HG323RW Аутентифицированный ограниченный веб-пользователь может загрузить shell-скрипт через обработчик импорта диагностики Netlink HG323RW, и процесс BOA с UID-0 выполнит его. Требуются аутентификация и действительные...
CVE-2026-96515
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
CVE-2026-96515 Command Injection Vulnerability in Netlink ICT HG323RW Router
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
EUVD-2026-85858
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
CVE-2026-96515 Command Injection Vulnerability in Netlink ICT HG323RW Router
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
CVE-2026-96515
The Netlink ICT HG323RW router is susceptible to a command injection vulnerability due to insufficient authorization and input validation controls within the diagnostic script import functionality . An authenticated attacker can exploit this by uploading and executing a specially crafted script v...
CVE-2026-96515: Missing Authorization
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
PT-2026-97789
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
MAL-2026-7299 Malicious code in ict-api-foundations (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7300 Malicious code in ict-ui-carbon (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ict-api-foundations (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ict-ui-carbon (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2016-20084: Improper Neutralization of Input During Web Page Generation
WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site scripting payloads through the admin.php page parameters. Attackers can inject malicious JavaScrip...
DORA Compliance Cybersecurity Guide for Finance
DORA Compliance Cybersecurity: A Practical Guide for Financial Services Teams DORA compliance cybersecurity is now a board-level priority for banks, insurers, investment firms, payment providers, and the ICT providers that support them. The Digital Operational Resilience Act shifts the conversati...
EUVD-2022-34054
Malicious code in bioql PyPI...
EUVD-2022-34057
Malicious code in bioql PyPI...
EUVD-2023-29945
Malicious code in bioql PyPI...
EUVD-2023-34156
Malicious code in bioql PyPI...
CVE-2024-29941
Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any site code and card number that is using the default ICT encryption...
CVE-2023-2692
A vulnerability has been found in SourceCodester ICT Laboratory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/roominfo.php of the component GET Parameter Handler. The manipulation of the argument name leads to cro...