CVE-2022-23862

CVE-2022-23862: Lokale Privilegienausweitung über nicht authentifiziertes JMX in YSoft SafeQ Der auf Port 9696 laufende SafeQ-JMX-Dienst ist anfällig für JMX-MLet-Angriffe. Da der Dienst keine Authentifizierung erzwang und unter dem Benutzer „NT Authority\System“ ausgeführt wurde, konnten wir die...

CVE-2022-23861

CVE-2022-23861: Múltiplos Cross-Site Scripting Armazenados no YSoft SafeQ Vários campos na aplicação web YSoft SafeQ podem ser usados para injetar entradas maliciosas que, devido à falta de sanitização da saída, resultam na execução de código JS arbitrário. Esses campos podem ser aproveitados par...

EUVD-2018-7375

Malware in sbrugna...

EUVD-2021-18734

Malware in sbrugna...

EUVD-2022-40772

Malicious code in bioql PyPI...

CVE-2022-38176

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as...

CVE-2021-31859

Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an alternative data stream...

CVE-2018-15498

YSoft SafeQ Server 6 allows a replay attack...

CVE-2022-23861

Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be...

CVE-2022-23861

Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be...

CVE-2022-23861

Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be...

YSoft SAFEQ 跨站脚本漏洞

YSoft SAFEQ is an enterprise print management suite solution platform from the Czech company YSoft. A security vulnerability exists in YSoft SAFEQ that stems from a lack of output cleanup, resulting in multiple fields in the YSoft SafeQ web application that can be used to inject malicious input...

YSoft SAFEQ 访问控制错误漏洞

YSoft SAFEQ is an enterprise print management suite solution platform from the Czech company YSoft. A security vulnerability exists in YSoft SAFEQ that stems from SafeQ JMX not enforcing authentication, resulting in vulnerability to JMX MLet attacks...

Exploit for Missing Authentication for Critical Function in Ysoft Safeq

CVE-2022-23862: Local Privilege Escalation via Unauthenticated...

Exploit for Cross-site Scripting in Ysoft Safeq

CVE-2022-23861: Multiple Stored Cross-Site Scripting in YSoft...

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

Design/Logic Flaw

DISPUTED An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE...

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

YSoft SAFEQ 6 安全漏洞

YSoft SAFEQ 6 is an enterprise print management suite solution platform from the Czech company YSoft. A security vulnerability exists in YSoft SAFEQ 6 Server versions prior to 6.0.82, which stems from the fact that when changing the URL of an LDAP server configuration from LDAPS to LDAP, the syst...