Categories
Tags
CVE-2025-51682, CVE-2025-51683: Time Management Software SQLi-RCE
Dario Weiss
External pentest lead to the discovery of two CVEs (CVE-2025-51682 & CVE-2025-51683) in mJobTime. Exploiting them leads to unauthenticated code execution.
2025-11-25
|
834 words
|
4 minutes
CVE-2025-10363: Unauthenticated RCE in Swiss Finance Software Topal
A .NET deserialization vulnerability in the Swiss software Topal Finanzbuchhaltung allows unauthenticated RCE as SYSTEM.
2025-10-06
|
350 words
|
2 minutes
CVE-2025-47188: Mitel Phone Unauthenticated RCE
Marc Bollhalder
Mitel phone firmware analysis lead to the discovery of two vulnerabilities (CVE-2025-47187 & CVE-2025-47188). Exploiting them leads to unauthenticated code execution on the phone itself.
2025-05-12
|
1806 words
|
9 minutes