1075 matches found
Zucchetti Ad Hoc Infinity 安全漏洞
Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A security vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 that stems from improper checking of the mcURL parameter, which could result in a victim being redirected to an attacker-controlled website...
CVE-2024-51319
A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...
CVE-2024-51320
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...
PT-2025-10776
Name of the Vulnerable Software and Affected Versions: Zucchetti Ad Hoc Infinity version 2.4 Description: The issue is related to an improper check on the m cURL parameter, which allows an attacker to redirect the victim to an attacker-controlled website after authentication. Recommendations: For...
CVE-2024-51322
A Cross Site Scripting (XSS) vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 . This flaw allows an authenticated attacker to achieve Remote Code Execution (RCE) by targeting specific components, including /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, and /jsp/gsmd...
CVE-2024-51322: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...
CVE-2024-51321: URL Redirection to Untrusted Site
In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...
CVE-2024-51319
A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...
CVE-2024-51321
In Zucchetti Ad Hoc Infinity version 2.4 , an improper check on the m_cURL parameter allows an attacker to perform an Open Redirect (CWE-601). This vulnerability enables an attacker to redirect a victim to an attacker-controlled website following a successful authentication. To mitigate this risk...
CVE-2024-51322
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...
PT-2025-10777 · Zucchetti · Zucchetti Ad Hoc Infinity
Name of the Vulnerable Software and Affected Versions: Zucchetti Ad Hoc Infinity version 2.4 Description: A Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity allows an authenticated attacker to achieve Remote Code Execution via the "/jsp/home.jsp", "/jsp/gsfr feditorHTML.jsp",...
Zucchetti Ad Hoc Infinity 跨站脚本漏洞
Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A cross-site scripting vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4, which originates from multiple components that allow an authenticated attacker to achieve remote code execution...
CVE-2024-51320: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...
CVE-2024-51321
In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...
PT-2025-2394 · Illumos · Illumos
Name of the Vulnerable Software and Affected Versions: illumos illumos-gate affected versions not specified Description: An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates, causing the algorithm to yield a result of POINT AT INFINITY when it...
PT-2025-1782
Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.1 to Infinity 24.2.0 Description The issue is related to a Stored XSS problem with the profile. Recommendations For Pega Platform versions 8.1 to Infinity 24.2.0, update to a version newer than Infinity 24.2.0 to resol...
CVE-2024-10716
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search...
CVE-2024-10716
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search...