25 matches found
CVE-2023-49232
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the password reset PINs of administrative users...
CVE-2023-49234
An XML external entity XXE vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server...
CVE-2023-49231
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token...
EUVD-2023-53237
Malicious code in bioql PyPI...
CVE-2023-49234
An XML external entity XXE vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server...
CVE-2023-49232
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the password reset PINs of administrative users...
CVE-2023-49231
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token...
Stilog Visual Planning 安全漏洞
Stilog Visual Planning is software from Stilog that allows you to efficiently manage resource allocation and share schedules with employees. A security vulnerability exists in Stilog Visual Planning 8. An attacker could exploit the vulnerability to access local server files and leak data to an...
CVE-2023-49234
An XML external entity XXE vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server...
CVE-2023-49231
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token...
CVE-2023-49234
A vulnerability exists in Stilog Visual Planning 8 (all versions prior to Build 240207 ) caused by an improper restriction of XML external entity references . An authenticated attacker can exploit the XML parser functionality to perform an arbitrary file read , potentially accessing local server ...
CVE-2023-49231
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token...
CVE-2023-49232
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the password reset PINs of administrative users...
CVE-2023-49234
An XML external entity XXE vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server...
PT-2024-13700 · Stilog · Stilog Visual Planning
Name of the Vulnerable Software and Affected Versions: Stilog Visual Planning version 8 Description: An authentication bypass issue was found, allowing an unauthenticated attacker to obtain an administrative API token. Recommendations: For Stilog Visual Planning version 8, consider restricting...
Stilog Visual Planning 安全漏洞
Stilog Visual Planning is software from Stilog that allows you to efficiently manage resource allocation and share schedules with employees. A security vulnerability exists in Stilog Visual Planning. An attacker could use this vulnerability to brute force the password reset PIN of an administrati...
CVE-2023-49234: Improper Restriction of XML External Entity Reference
An XML external entity XXE vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server...
CVE-2023-49232: Improper Privilege Management
An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the password reset PINs of administrative users...
CVE-2023-49231
An authentication bypass vulnerability exists in Stilog Visual Planning 8 (all versions prior to Build 240207 ) by STILOG I.S.T. The root cause is a wildcard injection within a prepared SQL statement on an undocumented REST API route. By exploiting the combination of user-controlled input and the...
PT-2024-13701 · Stilog · Stilog Visual Planning
Name of the Vulnerable Software and Affected Versions: Stilog Visual Planning version 8 Description: An authentication bypass issue was found, allowing an unauthenticated attacker to brute-force the password reset PINs of administrative users. Recommendations: For Stilog Visual Planning version 8...