← All credits
Maciej Kazulak
24 vulnerability records and advisories credit this contributor.
CVE-2025-8307
Recoverable passwords in Asseco Infomedica Plus
CVE-2025-8306
Improper Access Control in Asseco Infomedica Plus
CVE-2025-30064
Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
CVE-2025-30063
Excessive permissions on configuration files containing database logins and passwords
CVE-2025-30062
SQL injection in CheckUnitCodeAndKey.pl
CVE-2025-30061
SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter
CVE-2025-30060
SQL injection in ReturnUserUnitsXML.pl via the UserID parameter
CVE-2025-30059
Authenticated SQL injection in PrepareCDExportJSON.pl
CVE-2025-30058
SQL injection in getPatientIdentifier function of PatientService.pl
CVE-2025-30057
Authenticated RCE with uhcapache privileges in ConvertToPDF