https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 17:09:52 +0000 https://vulnerability.circl.lu/vuln/cve-2025-30031 <p><strong>Affected:</strong> Siemens TeleControl Server Basic</p> <p>A vulnerability has been identified in TeleControl Server Basic (All versions &lt; V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used &#39;UpdateUsers&#39; method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25922)</p> <p><strong>Affected:</strong> Siemens TeleControl Server Basic</p> <p>A vulnerability has been identified in TeleControl Server Basic (All versions &lt; V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used &#39;UpdateUsers&#39; method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25922)</p> https://vulnerability.circl.lu/vuln/cve-2025-30031 https://vulnerability.circl.lu/vuln/ssa-443402 <p>The affected application is vulnerable to SQL injection through the internally used &#39;CreateTrace&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25911) The affected application is vulnerable to SQL injection through the internally used &#39;VerifyUser&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25914) The affected application is vulnerable to SQL injection through the internally used &#39;Authenticate&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25913) The affected application is vulnerable to SQL inject…</p> <p>The affected application is vulnerable to SQL injection through the internally used &#39;CreateTrace&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25911) The affected application is vulnerable to SQL injection through the internally used &#39;VerifyUser&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25914) The affected application is vulnerable to SQL injection through the internally used &#39;Authenticate&#39; method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application&#39;s database and execute code with &#34;NT AUTHORITY\NetworkService&#34; permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25913) The affected application is vulnerable to SQL inject…</p> https://vulnerability.circl.lu/vuln/ssa-443402