vdisclose@cert-in.org.in
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS vdisclose@cert-in.org.in
03
bewertete Schwachstellen (153)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-110475US | — | — | ||
This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remo… | ||||
| CVE-2026-110474US | —OT erhöht | — | ||
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote at… | ||||
| CVE-2026-107104US | — | — | ||
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit th… | ||||
| CVE-2026-107103US | — | — | ||
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could… | ||||
| CVE-2026-107102US | —OT erhöht | — | ||
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated rem… | ||||
| CVE-2026-85153US | —OT erhöht | — | ||
This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exp… | ||||
| CVE-2026-96515US | —OT erhöht | Exploit | ||
This
vulnerability exists in the Netlink ICT HG323RW router due to insufficient
authorization and input validation controls in the diagnostic script import
functionality. An authen… | ||||
| CVE-2026-84149US | — | — | ||
This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit… | ||||
| CVE-2026-84148US | — | — | ||
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vul… | ||||
| CVE-2026-84147US | — | — | ||
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker coul… | ||||
| CVE-2026-19412US | —OT erhöht | — | ||
This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all d… | ||||
| CVE-2026-65894US | — | — | ||
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force… | ||||
| CVE-2026-65893US | —OT erhöht | Exploit | ||
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware.
An attacker with physical access could exploit this vulnerability b… | ||||
| CVE-2026-9506US | — | — | ||
This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this… | ||||
| CVE-2026-45433US | —OT erhöht | — | ||
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerabilit… | ||||
| CVE-2026-45432US | —OT erhöht | — | ||
This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit… | ||||
| CVE-2026-45431US | — | — | ||
This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated… | ||||
| CVE-2026-9274US | —OT erhöht | — | ||
This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnera… | ||||
| CVE-2026-42518US | —OT erhöht | — | ||
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticated remote attacker co… | ||||
| CVE-2026-42517US | — | — | ||
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by dec… | ||||