9 matches found
EUVD-2025-5293
Malicious code in bioql PyPI...
CVE-2023-47030
An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a UserService SOAP API endpoint to validate if a user exists...
CVE-2023-47030
A security vulnerability exists in NCR Terminal Handler v.1.5.1 (also referred to as NCR Atleos Terminal Handler ) due to the improper handling of GET requests by the UserService SOAP API endpoint used for user validation. This flaw allows a remote attacker to execute arbitrary code and obtain se...
CVE-2024-50693
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693: Authorization Bypass Through User-Controlled Key
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the userService API model...
CVE-2024-50693
The SunGrow iSolarCloud Android application, used for new energy power plant management, is vulnerable to Insecure Direct Object References (IDOR) in the userService API model . This flaw, categorized under CWE-639 , allows for authorization bypass via user-controlled keys. The vulnerability affe...
