Lucene search
+L

140 matches found

NVD
NVD
•added 2026/10/20 7:17 a.m.•8 views

CVE-2026-113404

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

8.8CVSS0.00351EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/20 6:24 a.m.•6 views

EUVD-2026-104808

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

8.8CVSS6.2AI score0.00351EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/20 6:24 a.m.•23 views

CVE-2026-113404 Uniong|WebITR - Insecure Deserialization

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server...

8.8CVSS0.00351EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 6:24 a.m.•17 views

CVE-2026-113404

The software WebITR , developed by Uniong , contains an Insecure Deserialization vulnerability (CWE-502). Authenticated remote attackers can exploit this by utilizing a hard-coded cryptographic key to craft and submit malicious serialized data. Successful exploitation allows the attacker to achie...

8.8CVSS6.2AI score0.00351EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/29 8:09 a.m.•26 views

CVE-2025-13769

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.00324EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/29 8:09 a.m.•38 views

CVE-2025-13768

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...

8.8CVSS5.8AI score0.00395EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/29 8:09 a.m.•31 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/29 8:09 a.m.•35 views

CVE-2025-13770

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.00324EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/11/28 8:15 a.m.•24 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00452EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/28 8:15 a.m.•25 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.00452EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/28 8:15 a.m.•21 views

CVE-2025-13769

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.00324EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/28 8:15 a.m.•24 views

CVE-2025-13770

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score0.00324EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/28 8:15 a.m.•25 views

CVE-2025-13770

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.00324EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/28 8:15 a.m.•19 views

CVE-2025-13769

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.00324EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/11/28 8:15 a.m.•21 views

CVE-2025-13768

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...

8.8CVSS5.8AI score0.00395EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/28 8:15 a.m.•23 views

CVE-2025-13768

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...

8.8CVSS0.00395EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/28 7:49 a.m.•15 views

CVE-2025-13771 Uniong|WebITR - Arbitrary File Read

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00452EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/28 7:49 a.m.•34 views

CVE-2025-13771 Uniong|WebITR - Arbitrary File Read

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.00452EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/28 7:49 a.m.•30 views

EUVD-2025-199863

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00452EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/28 7:49 a.m.•53 views

CVE-2025-13771

CVE-2025-13771 concerns WebITR, a system from Uniong. The vulnerability is an Arbitrary File Read caused by a Relative Path Traversal flaw, allowing authenticated remote attackers to download arbitrary system files. Affected details are consistently described across Red Hat, NVD, CIRCL, ENISA EUV...

7.1CVSS6AI score0.00452EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder