PT-2026-61797

Name of the Vulnerable Software and Affected Versions praisonaiagents affected versions not specified Description A Server-Side Request Forgery SSRF issue exists in the SearxNG and search web search tools. The searxng url variable is passed to the requests.get function without validation of the...

EUVD-2025-208873

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can exploit improper URL validation to...

CVE-2025-62395: Improper Access Control

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

CVE-2024-39250: Improper Neutralization of Special Elements used in an SQL Command

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...

PT-2024-28411 · Efrotech · Efrotech Timetrax

Name of the Vulnerable Software and Affected Versions: EfroTech Timetrax version 8.3 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability can be exploited via the q parameter in the search web interface. Recommendations: For EfroTech Timetrax...

CVE-2024-39250

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...

CVE-2024-39250

EfroTech Timetrax v8.3 contains an unauthenticated SQL injection vulnerability located in the q parameter of the search web interface. An unauthenticated attacker can exploit this flaw to execute SQL commands, potentially allowing them to extract or modify sensitive database information . While a...

CVE-2024-39250

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...

Description of the security update for SharePoint Enterprise Server 2013: October 8, 2019

None None...

CVE-2014-7525: Undefined Security Weakness

The Domain Name Search & Web Host aka com.wDomainNameSearchandRegistration application 0.64.13398.55733 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8065

Name of the Vulnerable Software and Affected Versions Domain Name Search & Web Host aka com.wDomainNameSearchandRegistration version 0.64.13398.55733 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the...

CVE-2002-2074: Undefined Security Weakness

SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page...