37 matches found
Zena-CVE-2021-45026
Zena - 存储型XSS到RCE漏洞利用POC Rocket Software的Zena应用程序v. 4.2.1的漏洞利用POC - 存储型XSS到RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC流程： 使用默认凭据登录Zena的webconfig页面 投放存储型XSS有效载荷 需要有人导航到webconfig页面才能触发有效载荷 触发的有效载荷利用Zena的REST API后端查找代理并为其构建任务 然后触发任务，从而在代理上执行指定命令...
EUVD-2021-31823
Malicious code in bioql PyPI...
EUVD-2021-31824
Malicious code in bioql PyPI...
EUVD-2024-54838
Malicious code in bioql PyPI...
CVE-2024-45955
Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...
CVE-2024-45955
Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...
CVE-2024-45955
Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...
Rocket Software Rocket Zena 安全漏洞
Rocket Software Rocket Zena is a workload automation software from Rocket Software, USA. A security vulnerability exists in Rocket Software Rocket Zena version 4.4.1.26, which stems from improper handling of the filter parameter and can lead to SQL injection attacks...
CVE-2024-45955
CVE-2024-45955 affects Rocket Software Rocket Zena 4.4.1.26, vulnerable to SQL Injection via the filter parameter. The root cause is described as improper handling of the filter parameter, enabling SQL injection attempts. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) yields a base sco...
PT-2025-30610 · Rocket · Rocket Zena
Name of the Vulnerable Software and Affected Versions: Rocket Software Rocket Zena version 4.4.1.26 Description: Rocket Software Rocket Zena version 4.4.1.26 is vulnerable to SQL Injection via the filter parameter. Recommendations: At the moment, there is no information about a newer version that...
zena-in.cz Cross Site Scripting vulnerability OBB-3450192
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition Cross-Site Scripting Vulnerability
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. A cross-site scripting vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems from...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition Information Disclosure Vulnerability
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An information disclosure vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems fr...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition XML External Entity Injection Vulnerability
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An XML external entity injection vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which...
CVE-2021-45024
ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...
CVE-2021-45026
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting XSS...
CVE-2021-45025
ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie...
CVE-2021-45026
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting XSS...