İçeriğe atla
Noroxi

wallosapp kayıtları

wallosapp üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%68,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 24
  2. 25
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2024-55372
    39İzleyin

    Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by

    KritikCVSS 9,8İstismar yokEPSS %1

    wallosapp · wallos16 Nis 2025

  • CVE-2024-55371
    39İzleyin

    Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uplo

    KritikCVSS 9,8İstismar yokEPSS %1

    wallosapp · wallos16 Nis 2025

  • CVE-2026-30840
    35İzleyin

    Wallos: Server-Side Request Forgery (SSRF) in Notification Testers

    YüksekCVSS 8,8İstismar yokEPSS %1

    wallosapp · wallos7 Mar 2026

  • CVE-2026-30828
    34İzleyin

    Wallos: SSRF via url parameter leading to File Traversal

    YüksekCVSS 8,7İstismar yokEPSS %1

    wallosapp · wallos7 Mar 2026

  • CVE-2026-33407
    33İzleyin

    Wallos: SSRF via HTTP Proxy Environment Variable

    YüksekCVSS 8,3İstismar yokEPSS %1

    wallosapp · wallos24 Mar 2026

  • CVE-2024-29320
    32İzleyin

    Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php.

    YüksekCVSS 8,1İstismar yokEPSS %1

    wallosapp · wallos30 Nis 2024

  • CVE-2026-27479
    30İzleyin

    Wallos: SSRF via Redirect Bypass in Logo/Icon URL Fetch

    YüksekCVSS 7,7İstismar yokEPSS %0

    wallosapp · wallos21 Şub 2026

  • CVE-2026-33399
    30İzleyin

    Wallos: SSRF Bypass - Incomplete Fix for CVE-2026-30839/30840

    YüksekCVSS 7,7İstismar yokEPSS %0

    wallosapp · wallos24 Mar 2026

  • CVE-2026-33401
    28İzleyin

    Wallos: Incomplete fix for CVE-2026-30840 - SSRF in AI and notification endpoints bypass ssrf_helper.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    wallosapp · wallos24 Mar 2026

  • CVE-2026-33417
    28İzleyin

    Wallos: Password Reset Tokens Never Expire

    YüksekCVSS 7,1İstismar yokEPSS %0

    wallosapp · wallos24 Mar 2026

  • CVE-2026-30841
    27İzleyin

    Wallos: Reflected XSS via unescaped token and email parameters in passwordreset.php

    OrtaCVSS 6,9İstismar yokEPSS %0

    wallosapp · wallos7 Mar 2026

  • CVE-2024-57386
    24İzleyin

    Cross Site Scripting vulnerability in Wallos v.2.41.0 allows a remote attacker to execute arbitrary code via the profile picture function.

    OrtaCVSS 6,1İstismar yokEPSS %0

    wallosapp · wallos23 Oca 2025

  • CVE-2026-30839
    21İzleyin

    Wallos: SSRF via webhook test endpoint

    OrtaCVSS 5,3İstismar yokEPSS %0

    wallosapp · wallos7 Mar 2026

  • CVE-2026-33400
    21İzleyin

    Wallos: Stored cross-site scripting (XSS) vulnerability in the payment method rename endpoint

    OrtaCVSS 5,4İstismar yokEPSS %0

    wallosapp · wallos24 Mar 2026

  • CVE-2024-22776
    18İzleyin

    Wallos 0.9 is vulnerable to Cross Site Scripting (XSS) in all text-based input fields without proper validation, excluding those requiring s

    OrtaCVSS 4,7İstismar yokEPSS %0

    wallosapp · wallos23 Şub 2024

  • CVE-2026-30842
    17İzleyin

    Wallos: Authenticated Missing Authorization Allows Deletion of Other Users’ Uploaded Avatars

    OrtaCVSS 4,3İstismar yokEPSS %0

    wallosapp · wallos7 Mar 2026