https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:57:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04948 bdu:2025-04948 https://cve.radiocsirt.org/vuln/bdu:2025-04948 https://cve.radiocsirt.org/vuln/cnvd-2025-08611 cnvd-2025-08611 https://cve.radiocsirt.org/vuln/cnvd-2025-08611 https://cve.radiocsirt.org/vuln/euvd-2026-231466 EUVD-2026-231466 https://cve.radiocsirt.org/vuln/euvd-2026-231466 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32840 <p>A vulnerability has been identified in TeleControl Server Basic (All versions &lt; V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used &#39;LockGateway&#39; method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.</p> <p>A vulnerability has been identified in TeleControl Server Basic (All versions &lt; V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used &#39;LockGateway&#39; method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-32840 https://cve.radiocsirt.org/vuln/ghsa-h4p7-4v4q-3q54 <p>A vulnerability has been identified in TeleControl Server Basic (All versions &lt; V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used &#39;LockGateway&#39; method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.</p> <p>A vulnerability has been identified in TeleControl Server Basic (All versions &lt; V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used &#39;LockGateway&#39; method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on.</p> https://cve.radiocsirt.org/vuln/ghsa-h4p7-4v4q-3q54 https://cve.radiocsirt.org/vuln/icsa-25-112-01 <p>The affected application is vulnerable to SQL injection through the internally used &#39;CreateTrace&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25911) The affected application is vulnerable to SQL injection through the internally used &#39;VerifyUser&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25914) The affected application is vulnerable to SQL injection through the internally used &#39;Authenticate&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25913) The affected application is vulnerable to SQL inject…</p> <p>The affected application is vulnerable to SQL injection through the internally used &#39;CreateTrace&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25911) The affected application is vulnerable to SQL injection through the internally used &#39;VerifyUser&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25914) The affected application is vulnerable to SQL injection through the internally used &#39;Authenticate&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25913) The affected application is vulnerable to SQL inject…</p> https://cve.radiocsirt.org/vuln/icsa-25-112-01