Path traversal

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

Sql injection

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even...

Sql injection

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records...

CVE-2024-26264 EBM Technologies RISWEB - SQL Injection

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records...

CVE-2024-26264

CVE-2024-26264 concerns EBM Technologies RISWEB, where a specific query function parameter does not properly restrict input and the page is accessible without login. This enables remote SQL injection without authentication, allowing an attacker to read, modify, and delete database records. The co...

CVE-2024-26264 EBM Technologies RISWEB - SQL Injection

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records...

CVE-2024-26263

Summary: CVE-2024-26263 pertains to EBM Technologies RISWEB where a URL path is not properly controlled by permissions, enabling attackers to browse specific pages and query sensitive data without login. The core issue is improper access control affecting RISWEB’s URL paths; exploitation details ...

CVE-2024-26263 EBM Technologies RISWEB - Improper Access Control

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

CVE-2024-26263 EBM Technologies RISWEB - Improper Access Control

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

CVE-2024-26262

The CVE-2024-26262 entry concerns EBM Technologies Uniweb/SoliPACS WebServer. The Connected documents confirm a concrete issue: the WebServer’s query function does not properly restrict user input, enabling SQL injection by authenticated regular users. This can lead to reading/modifying/deleting ...

CVE-2024-26262 EBM Technologies Uniweb/SoliPACS WebServer - SQL Injection

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even...

CVE-2024-26262 EBM Technologies Uniweb/SoliPACS WebServer - SQL Injection

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even...

Utarit Information Technologies SoliPay Mobile App Security Vulnerability

Utarit Information Technologies SoliPay Mobile App is a mobile application from Utarit Information Technologies. A security vulnerability exists in Utarit Information Technologies SoliPay Mobile App versions prior to 5.0.8 that stems from improper privilege management...

HCL Technologies HCL Connections Security Breach

HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from US-based HCL Technologies. A security vulnerability exists in HCL Connections that stems from improper authentication of certain requests. An attacker could exploit the vulnerability to cause a denial of servic...

CVE-2020-8273

creationtimestamp| type| source ---|---|--- 2024-02-06 22:44:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2111...

vanwardtechnologies.com Cross Site Scripting vulnerability OBB-3849610

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

HID Global Encoders

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable locally Vendor : HID Global Equipment : iCLASS SE, OMNIKEY Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration...

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch UCD that stems from the ability to...

HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A cross-site scripting vulnerability exists in HCL BigFix Platform, which stems...

GTB Central Console Security Vulnerability

GTB Technologies GTB Central Console is a security solution component or tool from GTB Technologies. A security vulnerability exists in GTB Central Console version 15.17.1-30814.NG. An attacker can exploit this vulnerability to inject arbitrary commands and compromise the platform...