243 matches found
The vulnerability of the “Vzlet SP” software suite, related to improper code generation, allows a perpetrator to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite arises from the lack of measures taken to protect the structure of the web page, allowing a hacker to execute arbitrary code.
The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Vzlet SP” software suite is related to deficiencies in the authentication process. This allows a hacker to alter the user identifier to any desired value and reassign the user’s password.
The vulnerability of the “Vzlet SP” software suite is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to remotely alter the user identifier and reassign the user’s password...
The vulnerability of the “Vzlet SP” software suite, related to deficiencies in the authorization process, allows a perpetrator to gain unauthorized access to protected information or functions.
The vulnerability of the “Vzlet SP” software complex is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or functions...
EUVD-2021-34728
IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserName' POST parameter. Attackers can send requests with valid usernames to retrieve user information...
CVE-2021-47717: Observable Response Discrepancy
IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserName' POST parameter. Attackers can send requests with valid usernames to retrieve user information...
Eaton Brightlayer Software Suite 安全漏洞
Eaton Brightlayer Software Suite is a digital infrastructure management software suite from Eaton Corporation USA. A security vulnerability exists in Eaton Brightlayer Software Suite version 7.3.0.SCP004, which originates from a privileged user being able to log in without sufficient credentials...
EUVD-2025-18968
Malicious code in bioql PyPI...
EUVD-2025-18969
Malicious code in bioql PyPI...
EUVD-2022-31746
Malicious code in bioql PyPI...
EUVD-2021-31301
Malicious code in bioql PyPI...
EUVD-2022-39104
Malicious code in bioql PyPI...
CVE-2025-34033
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-34034
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
CVE-2025-34033 5VTechnologies Blue Angel Software Suite OS Command Injection
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-34033 5VTechnologies Blue Angel Software Suite OS Command Injection
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-34033: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...
CVE-2025-34034: Use of Hard-coded Credentials
A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...
PT-2025-26661
Name of the Vulnerable Software and Affected Versions: Blue Angel Software Suite affected versions not specified Description: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and...