294 matches found
CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti
SQLi Vulnerability in TREX-MES-Applications CVE-2026-18782 Overview TREX MES is a commercial Manufacturing Execution System MES / Industry 4.0 platform used to collect and manage data from the production floor. The application's web API executes the client-supplied sql parameter directly on the...
CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi
Unauthorized Object Access in TREX-MES Applications CVE-2026-18783 Overview TREX MES is a commercial Manufacturing Execution System MES / Industry 4.0 platform used to collect and manage data from the production floor. In the conducted studies, it was determined that requests sent to the...
TREX MES 6.07.17.00090 / TrexDCAS MES 6.05.14.00074 SQL Injection
TREX MES versions 6.07.17.00090 and earlier and TrexDCAS MES versions 6.05.14.00074 and earlier contain an SQL injection vulnerability in web API sql parameter handling...
TREX MES 6.07.17.00090 Missing Authentication
TREX MES version 6.07.17.00090 and earlier, and TrexDCAS MES version 6.05.14.00074 and earlier, contain a missing server-side authentication issue in the /api/GetDataJSON3 endpoint that permits unauthenticated data queries...
CVE-2026-18782
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18783
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18782
The Trex MES software by Trex Digital Smart Manufacturing Systems Inc. contains an SQL injection vulnerability due to the improper neutralization of special elements in SQL commands. This flaw is severe enough to allow Command Line Execution via the SQL injection vector. The vulnerability affects...
CVE-2026-18782 SQL Injection in Trex Digital Manufacturing's Trex MES
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
EUVD-2026-89963
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18783
The Trex MES software by Trex Digital Smart Manufacturing Systems Inc. is vulnerable to an Authentication Bypass due to missing server-side authentication on a REST API endpoint . This vulnerability allows unauthorized access to critical functions. The issue affects versions through 2026-09-29 . ...
EUVD-2026-89961
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18783 Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18782: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES: through 2026-09-29...
CVE-2026-18783: Missing Authentication for Critical Function
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...
PT-2026-103294
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29...
PT-2026-103293
Name of the Vulnerable Software and Affected Versions Trex MES versions prior to 2026-09-29 Description Improper neutralization of special elements used in an SQL command allows for SQL injection, which can lead to Command Line Execution. Recommendations Update Trex MES to a version released afte...
Malicious Package
Overview trex-proxy-browser-extension-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
MAL-2026-1971 Malicious code in trex-proxy-browser-extension-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb36a59a719cff949c203a03a41c54b637bb1974bdea728b1bc15e837a7db45 The package trex-proxy-browser-extension-sdk was found to contain malicious code. Source: ghsa-malware...
Malicious code in trex-proxy-browser-extension-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb36a59a719cff949c203a03a41c54b637bb1974bdea728b1bc15e837a7db45 The package trex-proxy-browser-extension-sdk was found to contain malicious code. Source: ghsa-malware...