hsclabs records
10 published records for vendor hsclabs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-782 Exposed IOCTL with Insufficient Access Control1
- CWE-73 External Control of File Name or Path1
- CWE-29 Path Traversal: '\..\filename'1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-32370Proof of concept | An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a craftehsclabs · mailinspector · CWE-782 | Critical9.8 | — | 1.0% | May 7, 2024 |
36Monitor | CVE-2024-34470Proof of concept | An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.hsclabs · mailinspector · CWE-29 | High8.6 | — | 6.7% | May 6, 2024 |
31Monitor | CVE-2026-29963Proof of concept | HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.hsclabs · mailinspector · CWE-22 | High7.5 | — | 3.0% | May 18, 2026 |
31Monitor | CVE-2026-29962Proof of concept | HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.hsclabs · mailinspector · CWE-73 | High7.5 | — | 1.8% | May 18, 2026 |
30Monitor | CVE-2024-32371Proof of concept | An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain ahsclabs · mailinspector · CWE-20 | High7.5 | — | 0.7% | May 7, 2024 |
24Monitor | CVE-2026-29964No exploit | HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization ohsclabs · mailinspector · CWE-79 | Medium6.1 | — | 0.4% | May 18, 2026 |
24Monitor | CVE-2026-29965No exploit | HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralizathsclabs · mailinspector · CWE-79 | Medium6.1 | — | 0.3% | May 18, 2026 |
22Monitor | CVE-2024-34472Proof of concept | An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.hsclabs · mailinspector · CWE-89 | Medium5.5 | — | 0.7% | May 6, 2024 |
21Monitor | CVE-2024-34471Proof of concept | An issue was discovered in HSC Mailinspector 5.2.17-3.hsclabs · mailinspector · CWE-22 | Medium5.4 | — | 0.7% | May 6, 2024 |
17Monitor | CVE-2024-32369Proof of concept | SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive inforhsclabs · mailinspector · CWE-89 | Medium4.3 | — | 0.9% | May 7, 2024 |
- CVE-2024-3237039Monitor
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafte
CriticalCVSS 9.8Proof of conceptEPSS 1%hsclabs · mailinspectorMay 7, 2024
- CVE-2024-3447036Monitor
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.
HighCVSS 8.6Proof of conceptEPSS 7%hsclabs · mailinspectorMay 6, 2024
- CVE-2026-2996331Monitor
HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.
HighCVSS 7.5Proof of conceptEPSS 3%hsclabs · mailinspectorMay 18, 2026
- CVE-2026-2996231Monitor
HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.
HighCVSS 7.5Proof of conceptEPSS 2%hsclabs · mailinspectorMay 18, 2026
- CVE-2024-3237130Monitor
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain a
HighCVSS 7.5Proof of conceptEPSS 1%hsclabs · mailinspectorMay 7, 2024
- CVE-2026-2996424Monitor
HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization o
MediumCVSS 6.1No exploitEPSS 0%hsclabs · mailinspectorMay 18, 2026
- CVE-2026-2996524Monitor
HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralizat
MediumCVSS 6.1No exploitEPSS 0%hsclabs · mailinspectorMay 18, 2026
- CVE-2024-3447222Monitor
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.
MediumCVSS 5.5Proof of conceptEPSS 1%hsclabs · mailinspectorMay 6, 2024
- CVE-2024-3447121Monitor
An issue was discovered in HSC Mailinspector 5.2.17-3.
MediumCVSS 5.4Proof of conceptEPSS 1%hsclabs · mailinspectorMay 6, 2024
- CVE-2024-3236917Monitor
SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive infor
MediumCVSS 4.3Proof of conceptEPSS 1%hsclabs · mailinspectorMay 7, 2024