CVE-2026-110632

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...

CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...

CVE-2026-110632

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 . This vulnerability allows remote attackers to invoke the UpdateConfigReferent method to redirect the SYSTEM updater to a malicious reference server. By serving modified module archives with matchi...

CVE-2002-2292

Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request to port 9095...

CVE-2002-2292

The CVE-2002-2292 entry describes a directory traversal vulnerability in the Remote Console Applet of Halycon Software iASP 1.0.9, where an attacker can read arbitrary files by using a .. sequence in an HTTP request to port 9095. The affected component is the Remote Console Applet within Halycon ...

CVE-2002-2292: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request to port 9095...