CVE-2024-13151 SQLi in ESBI Informatics's Auto Service Software

CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software allows SQL Injection. This issue affects Auto Service Software: before v.2025.10.01...

CVE-2025-8463 IDOR in SecHard Information Technologies' SecHard

Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing. This issue affects SecHard: before 3.6.2-20250805...

CVE-2025-10439 SQLi in Yordam Library Automation System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yordam Informatics Yordam Library Automation System allows SQL Injection. This issue affects Yordam Library Automation System: from 21.5 & 21.6 before 21.7...

Nebula Informatics SecHard 安全漏洞

Nebula Informatics SecHard is a multi-module software for implementing a zero-trust architecture from Nebula Informatics. A security vulnerability exists in versions prior to Nebula Informatics SecHard 3.6.2-20250805, which stems from a user-controllable key bypassing authorization and could lead...

CVE-2024-13174

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-13174

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-13174 SQLi in E1 Informatics' Web Application

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-13174 SQLi in E1 Informatics' Web Application

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-13174

CVE-2024-13174 is an SQL Injection in the E1 Informatics Web Application caused by improper neutralization of special elements in SQL commands. Affected versions are through 20250916. The CVSS 3.1 base score is 8.6 (High) with NETWORK attack vector, no privileges required, no user interaction. Im...

E1 Informatics Web Application SQL注入漏洞

E1 Informatics Web Application is a web application from E1 Informatics Turkey. A SQL injection vulnerability exists in E1 Informatics Web Application 20250916 and earlier versions, which stems from improper neutralization of special elements in SQL commands, which can lead to SQL injection attac...

PT-2025-37993

Name of the Vulnerable Software and Affected Versions: E1 Informatics Web Application versions through 20250916 Description: The E1 Informatics Web Application contains a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows attackers to perfor...

CVE-2025-4411

CVE-2025-4411 is an XSS vulnerability in Dataprom Informatics PACS-ACSS. The issue arises from improper neutralization of input during web page generation, allowing cross-site scripting. Affected products are Dataprom PACS-ACSS versions prior to 16.05.2025. The CVSS 3.1 base vector is AV:N/AC:L/P...

CVE-2025-4411 XSS in Dataprom Informatics' PACS-ACSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

CVE-2025-4411 XSS in Dataprom Informatics' PACS-ACSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

Dataprom Informatics PACS-ACSS 跨站脚本漏洞

Dataprom Informatics PACS-ACSS is a system for managing employee attendance records, access rights and security control at Dataprom Informatics in Turkey. A cross-site scripting vulnerability exists in Dataprom Informatics PACS-ACSS versions prior to 16.05.2025 that originates from cross-site...

PT-2025-30573

Name of the Vulnerable Software and Affected Versions Dataprom Informatics PACS-ACSS versions prior to 16.05.2025 Description The software contains an Improper Neutralization of Input During Web Page Generation, leading to a Cross-Site Scripting XSS issue. This allows for the injection of malicio...

CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...

CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection.This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...

CVE-2024-11739

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...

CVE-2024-11739

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...