ART@zuso.ai
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS ART@zuso.ai
03
assessed vulnerabilities (49)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-96440US | — | — | ||
Improper Limitation of a Pathname to a Restricted
Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp
API endpoint of Flowring Agentflow 4.0 version before 2023/03/… | ||||
| CVE-2026-96431US | — | — | ||
Unrestricted Upload of File with Dangerous Type in the
/WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version
before 2023/03/24 allows remote authenticat… | ||||
| CVE-2026-96430US | — | — | ||
Exposed Dangerous Method or Function in the
/WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote
authenticated users to execute arbit… | ||||
| CVE-2026-96429US | — | — | ||
SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API
endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows
remote attackers to execute arbitrary SQL commands v… | ||||
| CVE-2026-96428US | — | — | ||
SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands vi… | ||||
| CVE-2026-76159US | — | — | ||
Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to escal… | ||||
| CVE-2026-76158US | — | — | ||
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary l… | ||||
| CVE-2026-76157US | —OT elevated | — | ||
Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to… | ||||
| CVE-2026-76156US | — | — | ||
OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system co… | ||||
| CVE-2026-76155US | —OT elevated | — | ||
Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging… | ||||
| CVE-2026-24727US | — | — | ||
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote aut… | ||||
| CVE-2026-24729US | — | — | ||
An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute a… | ||||
| CVE-2026-24728US | —OT elevated | — | ||
A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access… | ||||
| CVE-2025-31342US | — | — | ||
An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module through 1.3 version all… | ||||
| CVE-2025-54946US | critical9.8 | — | ||
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands. | ||||
| CVE-2025-54945US | critical9.8 | — | ||
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via… | ||||
| CVE-2025-54944US | critical9.8 | — | ||
An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a sp… | ||||
| CVE-2025-54943US | critical9.8OT elevated | — | ||
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the… | ||||
| CVE-2025-54942US | critical9.8OT elevated | — | ||
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality… | ||||
| CVE-2025-5192US | high7.5OT elevated | — | ||
A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remot… | ||||