Alan Chung

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read issue. Unauthenticated remote attackers can exploit Absolute Path Traversal to download arbitrary system files. The vulnerability allows attackers to access files on the system without needing to authenticate.

MeetingHub, developed by HAMASTAR Technology, has an arbitrary file upload issue. This allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. The issue allows for the upload of files, such as `test.php`, via a POST request to the `/upload` API endpoint. Successful exploitation enables remote code execution (RCE) without authentication.

A missing authentication issue exists in MeetingHub, developed by HAMASTAR Technology. This allows unauthenticated remote attackers to access specific API functions and obtain meeting-related information. The vulnerable API functions allow access to meeting data without proper authorization.

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has an issue that allows unauthenticated remote attackers to download arbitrary system files by exploiting Absolute Path Traversal. The vulnerability allows for arbitrary file reading.

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has an arbitrary file upload issue. This allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server.

The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key issue. By controlling the `user ID` parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to privilege escalation.

The issue is an OS Command Injection vulnerability, allowing remote attackers with normal user privilege to execute arbitrary system commands by manipulating user inputs on a specific page.

The issue concerns a path traversal vulnerability within the file download function of SmartBPM.NET, allowing an unauthenticated remote attacker to access arbitrary system files. Additionally, there is a vulnerability related to the use of a hard-coded authentication key, which can be exploited by an unauthenticated remote attacker to access the system with regular user privileges, enabling them to read application data and execute submission and approval processes.

The issue is related to the use of a hard-coded machine key in SmartSoft SmartBPM.NET. This allows an unauthenticated remote attacker to send a serialized payload to the server, potentially executing arbitrary code and disrupting service.

The issue is related to the use of a hard-coded authentication key. An unauthenticated remote attacker can exploit this to access the system with regular user privilege, allowing them to read application data and execute submission and approval processes.

The issue is related to improper authentication in the Agentflow BPM enterprise management system. A remote attacker with general user privilege can exploit this by changing the name of the user account to acquire arbitrary account privilege. This allows the attacker to access, manipulate the system, or disrupt the service.

The Agentflow BPM file download function has a path traversal issue. This allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files.

The file upload function has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this to upload arbitrary files and execute arbitrary code, potentially manipulating the system or disrupting the service.

The UltraLog Express device management interface has an issue with access authentication on certain pages or functions. This allows any user to access a privileged page for managing accounts by navigating through a specific system directory.

The issue concerns the UltraLog Express device management interface, which fails to properly filter user-inputted strings in specific parameters. This allows attackers to inject arbitrary SQL commands.

The issue concerns the storage of user information in cleartext by the UltraLog Express device management software. This allows any user to obtain account information through a specific page. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.