EUVD-2020-21289

Malware in sbrugna...

EUVD-2020-18398

Malware in sbrugna...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

Input validation

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

CVE-2020-28898

CVE-2020-28898 affects QED ResourceXpress up to version 4.9k, where submitting a large numeric or alphanumeric value in specific URL parameters triggers a server error during script execution due to insufficient input validation. This is the concrete technical detail available across multiple con...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

QED ResourceXpress 输入验证错误漏洞

QED ResourceXpress is an application from QED USA. a centralized application that helps you book meeting rooms, desks and cluttered spaces more efficiently. A security vulnerability exists in QED ResourceXpress version 4.9k and prior versions that stems from a server error during script execution...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

Default credentials

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

CVE-2020-25746

CVE-2020-25746 affects QED ResourceXpress Qubi3 devices before version 1.40.9. The issue allows a local attacker with physical access to the device to obtain sensitive information through the debug interface (USB keystrokes), effectively exposing wireless passwords and compromising confidentialit...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...