8 matches found
EUVD-2025-5293
Malicious code in bioql PyPI...
CVE-2023-47030
An issue in NCR Atleos Terminal Handler version 1.5.1 allows a remote attacker to execute arbitrary code and access sensitive information . The vulnerability stems from the mishandling of GET requests by the UserService SOAP API endpoint , which is used to validate if a user exists. To mitigate t...
CVE-2023-47030
An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a UserService SOAP API endpoint to validate if a user exists...
CVE-2024-50693
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693
The SunGrow iSolarCloud Android application, used for new energy power plant management, data collection, and monitoring, is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists within the userService API model , potentially allowing unauthorized access or actions. This vuln...