Exposed configuration files on several websites of a Swiss IT service provider
Area: Swiss Health Sector
Criticality: low
Status: fixed
Published on 2024-06-20
Vulnerability Hub
The National Test Institute for Cybersecurity NTC regularly conducts independent and neutral security tests of networked infrastructures, devices and applications. Vulnerability disclosure ensures a relevant impact on society, and serves our commitment to Switzerland's security and digital sovereignty.
The Vulnerability Hub lists the most relevant vulnerabilities identified by the NTC, free and open. Further details about the products tested and the vulnerabilities identified may be provided on a case-by-case basis. Please use the contact form.
Please note that the following list is only a selection of NTC's work.
94 Results
List
Vulnerability
Area
Criticality
Status
Published on
Directory listing and missing access control on a CMS website of a Swiss software provider
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed .git repository of a Swiss medical center’s website
Area: Swiss Health Sector
Criticality: medium
Status: fixed
Published on 2024-06-20
Exposed configuration file on the website of a Swiss medical centre
Area: Swiss Health Sector
Criticality: low
Status: fixed
Published on 2024-06-20
SQL injection on a website of a Swiss medical centre
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Broken access control on a web app of a Swiss medical centre
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
SQL injection on a web app of a Swiss software development company
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Open redirect vulnerability on demokratis.ch
Area: Other
Criticality: low
Status: fixed
Published on 2024-06-20
Publicly accessible backup files for a web application of a Swiss energy and e-mobility provider
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2024-06-20
Cross-App Scripting vulnerability in a mobile app of a Swiss retail company
Area: Other
Criticality: low
Status: fixed
Published on 2024-06-20
SQL injections in web applications of a Swiss energy and e-mobility provider
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2024-06-20
Cross-App Scripting vulnerability in the mobile app of a Swiss retail company
Area: Other
Criticality: low
Status: fixed
Published on 2024-06-20
Login bypass on the web app of a Swiss medical network
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-20
Cross-App Scripting vulnerability in a mobile app of a Swiss retail company
Area: Other
Criticality: low
Status: fixed
Published on 2024-06-20
Directory listings on several websites of a Swiss software provider
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2024-06-07
Exposed backup file on a website of an int. developer of charging infrastructure
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
SQL injection in a web API of an int. developer of e-mobility charging infrastructure
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Login bypass in the web app of an int. roaming platform for e-mobility
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
SQL injection in the web app of an int. roaming network charging platform
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed secret key in a web app of an int. e-mobility charging station manufacturer
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Exposed Spring Boot Actuator of a Swiss energy service provider
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Exposed admin password on a public git instance of an int. e-mobility platform
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed API endpoints in a web application of an int. charging station manufacturer
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Exposed Symfony profiler of an int. manufacturer of energy management systems
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Stored XSS in the web app of an international manufacturer of energy management systems
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15