CVE-2025-2356

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

CVE-2025-2356 BlackVue App API deviceDelete get request method with sensitive query strings

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

PT-2025-8935 · Trivision · Camera Nc227Wf

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security issue exists in the transmission of passwords through query strings, potentially exposing confidential information to third parties. Recommendations: At the moment, there is no...

CVE-2024-12012

A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of the URL and therefore exposed to information leakage...

CVE-2025-0730 TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings

A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usraccountset.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request...

CVE-2024-9427

Koji contains an XSS vulnerability (CVE-2024-9427) due to unsanitized input that can reflect JavaScript from a malicious link in the web page. The description notes that existing XSS protections in the code are expected to prevent submitting actions or changes. The connected sources confirm this ...

CVE-2024-9427 Koji: escape html tag characters in the query string

A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code...

CVE-2024-50340 Ability to change environment from query in symfony/runtime

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

CVE-2024-9147

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings. This issue affects PosPratik: before v3.2.1...

CVE-2024-9147

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings. This issue affects PosPratik: before v3.2.1...

CVE-2024-9147 HTML Injection in Bna Informatics' PosPratik

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings. This issue affects PosPratik: before v3.2.1...

CVE-2024-9147

Summary: CVE-2024-9147 concerns a Basic XSS in Bna Informatics PosPratik prior to v3.2.1 due to improper neutralization of script-related HTML tags in HTTP query strings. Affected product/version: PosPratik pre-3.2.1. Root cause: insufficient sanitization of user-supplied input in query strings l...

CVE-2024-9147 HTML Injection in Bna Informatics' PosPratik

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings. This issue affects PosPratik: before v3.2.1...

Bna Informatics PosPratik 安全漏洞

Bna Informatics PosPratik is an application from Bna Informatics, Inc. A security vulnerability exists in Bna Informatics PosPratik versions prior to v3.2.1, which stems from improper neutralization of script-related HTML tags in web pages, allowing cross-site scripting attacks via HTTP query...

PT-2024-39456 · Bna Informatics · Pospratik

Name of the Vulnerable Software and Affected Versions: Bna Informatics PosPratik versions prior to 3.2.1 Description: A Basic XSS vulnerability is found in Bna Informatics PosPratik, which fails to neutralize script-related HTML tags properly. This allows XSS through HTTP query strings...

PT-2024-29547 · Ibm · Ibm Txseries For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms version 10.1 Description: The issue allows an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request, which could be obtained using man-in-the-middle technique...

CVE-2024-41592

DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs...

The vulnerability of the exacqVision Web Service web interface of the exacqVision surveillance system, related to the disclosure of information through query strings, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the exacqVision Web Service web interface of the video surveillance system involves the disclosure of information through query strings during the processing of authentication tokens. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorize...

PT-2024-5522 · Unknown · Exacqvision Web Service

Name of the Vulnerable Software and Affected Versions: exacqVision Web Service affected versions not specified Description: The issue is related to the exposure of authentication token details within communications under certain circumstances. This can occur when the exacqVision Web Service handl...

PT-2024-4814 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to the disclosure of information through a query string, potentially allowing a remote attacker to gain unauthorized access to protected information. This could ...