Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-4532

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00481EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/02/21 11:40 a.m.•31 views

CVE-2024-9150 Code Injection in Wyn Enterprise

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

8.7CVSS0.00481EPSS
SaveExploits0References3
CVE
CVE
•added 2025/02/21 11:40 a.m.•55 views

CVE-2024-9150

CVE-2024-9150 affects Wyn Enterprise: the report generation feature allows code inclusion beyond safe bounds, enabling a low-privilege user to abuse the functionality to execute malicious code, load DLLs, and run OS commands on a high-privilege host. The vulnerability arises from insufficient inp...

8.7CVSS7AI score0.00481EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/02/21 11:40 a.m.•11 views

CVE-2024-9150 Code Injection in Wyn Enterprise

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

8.7CVSS7AI score0.00481EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/21 12:00 a.m.•15 views

PT-2025-7455 · Unknown · Wyn Enterprise

Name of the Vulnerable Software and Affected Versions: Wyn Enterprise versions prior to 8.0.00204.0 Description: The report generation functionality in Wyn Enterprise allows for code inclusion but does not sufficiently limit what code might be included. An attacker can use a low-privileges accoun...

8.7CVSS7.7AI score0.00481EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/21 12:00 a.m.•4 views

CVE-2024-9150: Improper Neutralization of Special Elements Used in a Template Engine

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

8.7CVSS5.9AI score0.00481EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/21 12:00 a.m.•18 views

Wyn Enterprise 安全漏洞

Wyn Enterprise is an embedded business intelligence and analytics tool from Wyn Enterprise, Inc. A security vulnerability exists in Wyn Enterprise prior to version 8.0.00204.0, which stems from a report generation feature that allows code to be included, but does not adequately restrict the code...

8.7CVSS7.1AI score0.00481EPSS
SaveExploits0References3
Rows per page
Query Builder