InterSystems IRIS FolderManager Property Injection RCE

InterSystems IRIS FolderManager Property Injection RCE """InterSystems IRIS FolderManager Property Injection RCE""" from future import annotations from kittysploit import from lib.exploit.handler import Handler from lib.protocols.http.httpclient import Httpclient from urllib.parse import urlparse...

InterSystems IRIS FolderManager Property Injection RCE — Detect

Fingerprint / reachability check for InterSystems IRIS FolderManager Property Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for InterSystems IRIS FolderManager Property Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

EUVD-2026-108523

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

CVE-2026-111594

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

CVE-2026-111594

InterSystems IRIS for Health contains a vulnerability where TLS/SSL encryption is turned off by default . This configuration allows an attacker to intercept and view transmitted data, which could subsequently be used to gain unauthorized access to the device. CISA recommends minimizing network ex...

CVE-2026-111594 InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

InterSystems Corporation InterSystems IRIS for Health

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

PT-2026-121673

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

EUVD-2009-5127

Malware in sbrugna...

EUVD-2018-8925

Malware in sbrugna...

EUVD-2004-2674

Malware in sbrugna...

EUVD-2004-2673

Malware in sbrugna...

EUVD-2007-0437

Malware in sbrugna...

EUVD-2018-8927

Malware in sbrugna...

EUVD-2003-1323

Malware in sbrugna...

EUVD-2018-8926

Malware in sbrugna...

CVE-2009-20005

A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a sta...

CVE-2009-20005

A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a sta...

CVE-2009-20005 InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a sta...

CVE-2009-20005

CVE-2009-20005 affects InterSystems Caché 2009.1, where a stack-based buffer overflow occurs in the UtilConfigHome.csp endpoint triggered by an oversized .csp argument in an HTTP GET. Root cause: insufficient bounds checking leads to overflow of a stack buffer, enabling arbitrary code execution. ...