EUVD-2020-18398

Malware in sbrugna...

EUVD-2020-21289

Malware in sbrugna...

EUVD-2020-6085

Malware in sbrugna...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

CVE-2020-13877

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

Input validation

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

CVE-2020-28898

CVE-2020-28898 affects QED ResourceXpress up to version 4.9k, where submitting a large numeric or alphanumeric value in specific URL parameters triggers a server error during script execution due to insufficient input validation. This is the concrete technical detail available across multiple con...

CVE-2020-28898

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

QED ResourceXpress 输入验证错误漏洞

QED ResourceXpress is an application from QED USA. a centralized application that helps you book meeting rooms, desks and cluttered spaces more efficiently. A security vulnerability exists in QED ResourceXpress version 4.9k and prior versions that stems from a server error during script execution...

Resourcexpress Meeting Monitor SQL Injection Vulnerability

Resourcexpress Meeting Monitor is a meeting booking software from Resourcexpress UK. It centralizes the management of meeting room screens and desk booking equipment to support rational meeting booking. A SQL injection vulnerability exists in Resourcexpress Meeting Monitor version 4.9, which stem...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

Default credentials

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

CVE-2020-25746

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...

CVE-2020-25746

CVE-2020-25746 affects QED ResourceXpress Qubi3 devices before version 1.40.9. The issue allows a local attacker with physical access to the device to obtain sensitive information through the debug interface (USB keystrokes), effectively exposing wireless passwords and compromising confidentialit...

Resourcexpress Qubi3 Information Disclosure Vulnerability

Resourcexpress Qubi3 is a conference room booking device from Resourcexpress UK. A security vulnerability exists in QED ResourceXpress Qubi3 prior to version 1.40.9, which can be exploited by an attacker to obtain sensitive information through the debugging interface...

CVE-2020-13877

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure...