12 matches found
EUVD-2023-27653
Malicious code in bioql PyPI...
EUVD-2022-50207
Malicious code in bioql PyPI...
CVE-2022-47445
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0...
CVE-2022-47445
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0...
CVE-2022-47445
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0...
CVE-2022-47445
CVE-2022-47445 concerns Be POPIA Compliant WordPress plugin (
CVE-2023-23553
Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker...
CVE-2023-23551 X-600M Code Injection
Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code...
CVE-2023-23551
CVE-2023-23551 affects Control By Web X-600M web-enabled industrial I/O controllers. The vulnerability arises from improper generation of code, allowing Lua-script execution that could let an attacker remotely execute arbitrary code via the network. Affected device: X-600M; root cause: code injec...
PT-2023-1509 · Controlbyweb · Control By Web X-600M
Name of the Vulnerable Software and Affected Versions: Control By Web X-600M affected versions not specified Description: The issue is related to code injection in Lua scripts, which could allow an attacker to remotely execute arbitrary code. This is due to errors in code generation. The...
PT-2023-19035 · Controlbyweb · Control By Web X-400
Name of the Vulnerable Software and Affected Versions: Control By Web X-400 devices affected versions not specified Description: The issue concerns a cross-site scripting attack that could result in private and session information being transferred to the attacker. Recommendations: At the moment,...