Cross-App Scripting vulnerability in the Microsoft Authentication Library for .NET
Area: Open Source
Criticality: low
Status: fixed
Published on 2024-06-25
Vulnerability Hub
The National Test Institute for Cybersecurity NTC conducts independent and neutral security tests of networked infrastructures, devices and applications. By disclosing vulnerabilities, we contribute to cybersecurity awareness and reinforce Switzerland’s security and digital sovereignty.
The Vulnerability Hub provides open and free access to the most relevant vulnerabilities identified by the NTC. Additional details about tested products and discovered vulnerabilities may be available upon request. Please reach out via the contact form.
Please note that the following list is only a selection of NTC's work.
106 Results
List
Vulnerability
Area
Criticality
Status
Published on
Remote code execution through server-side template injection in Peering Manager
Area: Open Source
Criticality: high
Status: fixed
Published on 2024-06-25
Cross-site scripting on the router page in Peering Manager
Area: Open Source
Criticality: medium
Status: fixed
Published on 2024-06-25
Open redirection using the return_url parameter in Peering Manager
Area: Open Source
Criticality: low
Status: fixed
Published on 2024-06-25
Exposed backup file on a Swiss dental centre's development website
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed work schedule website backup of a Swiss hospital group
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Broken access control for the work schedule website of a Swiss hospital group
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection in the work schedule website of a Swiss hospital group
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed Spring Boot Actuator in a web app of a Swiss insurance company
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed website backup of a Swiss medical centre
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed software binaries on the website of a Swiss software development company
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Leaked ftp server credentials of a Swiss software development company
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed log files on the website of a Swiss software development company
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed Symfony profiler on a Swiss health insurance company website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed database backup on a Swiss dental implant manufacturer's website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Symfony debug bar exposed on a Swiss orthopaedic centre's website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed debug log on a Laravel instance on the website of a Swiss hospital
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed .git repository on the website of a Swiss hospital
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection on a web app of a Swiss software development company
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed .git repository on several websites of a Swiss care network
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection on the website of a Swiss medical practice
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed log files on the website of a Swiss care network
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
SQL injection on a Swiss hospital’s website
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
SQL injection on a Swiss medical device manufacturer’s website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Exposed Spring Boot Actuator on a Swiss software development company’s website
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20