Lucene search
+L

13057 matches found

RedhatCVE
RedhatCVE
•added 2026/01/23 9:18 a.m.•34 views

CVE-2026-1331

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.5AI score0.00759EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•6 views

CVE-2025-4320: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Authentication Bypass, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor...

10CVSS5.8AI score0.00512EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/22 10:16 a.m.•16 views

CVE-2025-4764

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection.This issue affects Hotel Guest Hotspot: through 22012026. NOTE: The vendor was contacted early about this...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 10:16 a.m.•13 views

CVE-2025-4764

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection. This issue affects Hotel Guest Hotspot: through 22012026. NOTE: The vendor was contacted early about this...

8.8CVSS0.00468EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/22 10:16 a.m.•27 views

CVE-2026-1332

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

5.3CVSS5.9AI score0.0046EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/22 9:18 a.m.•15 views

CVE-2026-1332

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS5.4AI score0.0046EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/22 9:18 a.m.•43 views

CVE-2026-1332 HAMASTAR Technology|MeetingHub - Missing Authentication

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS0.0046EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/22 9:15 a.m.•23 views

CVE-2026-1331

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00759EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/22 9:15 a.m.•25 views

CVE-2026-1330

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00671EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/22 9:13 a.m.•5 views

CVE-2025-4764

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection. This issue affects Hotel Guest Hotspot: through 22012026. NOTE: The vendor was contacted early about this...

8.8CVSS5.5AI score0.00468EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/22 9:13 a.m.•41 views

CVE-2025-4764 SQLi in Aida Computer's Hotspot

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection. This issue affects Hotel Guest Hotspot: through 22012026. NOTE: The vendor was contacted early about this...

8CVSS0.00468EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/22 8:57 a.m.•14 views

CVE-2026-1331

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.4AI score0.00759EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/22 8:29 a.m.•54 views

CVE-2026-1330 HAMASTAR Technology|MeetingHub - Arbitrary File Read

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00671EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 8:29 a.m.•41 views

CVE-2026-1330

CVE-2026-1330 concerns MeetingHub by HAMASTAR Technology, with an Arbitrary File Read vulnerability exploitable via Absolute Path Traversal . The issue enables unauthenticated remote attackers to download arbitrary system files. The provided sources describe the affected software and vulnerabilit...

8.7CVSS6AI score0.00671EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•42 views

PT-2026-3921

Name of the Vulnerable Software and Affected Versions MeetingHub affected versions not specified Description MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read issue. Unauthenticated remote attackers can exploit Absolute Path Traversal to download arbitrary system files. The...

8.7CVSS6AI score0.00671EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•22 views

PT-2026-3925

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS5.5AI score0.0046EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/01/22 12:00 a.m.•15 views

CISA: Principles for the Secure Integration of Artificial Intelligence in Operational Technology V2

Artificial intelligence AI has the potential to increase efficiency and productivity, enhance decision-making, cut costs and improve customer experience, but introducing AI in operational technology OT environments can introduce risks that require careful management to support the safety, securit...

5.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•30 views

PT-2026-3924

Name of the Vulnerable Software and Affected Versions MeetingHub affected versions not specified Description MeetingHub, developed by HAMASTAR Technology, has an arbitrary file upload issue. This allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitra...

9.8CVSS6.6AI score0.00759EPSS
SaveExploits0References13
HackRead
HackRead
•added 2026/01/20 3:22 p.m.•16 views

Sprocket Security Appoints Eric Sheridan as Chief Technology Officer

Madison, United States, 20th January 2026, CyberNewsWire...

5.5AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/18 12:00 a.m.•14 views

Abusing the Internet of Medical Things: Evaluating Threat Models and Forensic Readiness for Multi-Vector Attacks on Connected Healthcare Devices

Individuals experiencing interpersonal violence IPV, who depend on medical devices, represent a uniquely vulnerable population as healthcare technologies become increasingly connected. Despite rapid growth in MedTech innovation and "health-at-home" ecosystems, the intersection of MedTech...

5.4AI score
SaveExploits0
Rows per page
Query Builder