https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:16:19.096178+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-229349 EUVD-2026-229349 2026-10-02T21:16:19.144919+00:00 EUVD-2026-229349 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22372 fkie_cve-2025-22372 2026-10-02T21:16:19.144956+00:00

Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.

This issue affects BASEC: from 14 Dec 2021.

 https://cve.radiocsirt.org/vuln/ghsa-p8mv-f94r-2px4 GHSA-p8mv-f94r-2px4 2026-10-02T21:16:19.144991+00:00

Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.

This issue affects BASEC: from 14 Dec 2021.

 https://cve.radiocsirt.org/vuln/va-25-104-01 VA-25-104-01 — SicommNet multiple vulnerabilities 2026-10-02T21:16:19.145009+00:00

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the SicommNet BASEC (SaaS) login page allows an unauthenticated remote attacker to bypass authentication and execute arbitrary SQL commands. This issue was discovered on 2021-12-14 and fixed on 2025-04-16. An Insufficiently Protected Credentials vulnerability in SicommNet BASEC (SaaS) allows password recovery. Passwords are either stored in plain text or using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily. This issue was discovered on 2021-12-14. An Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC (SaaS) allows reflected XSS, XSS through HTTP query strings, rendering of arbitrary HTML, and alternation of CSS styles. This issue was discovered on 2021-12-14.