← All credits
Maciej Kazulak
29 vulnerability records and advisories credit this contributor.
CVE-2025-8306
Improper Access Control in Asseco Infomedica Plus
CVE-2025-8307
Recoverable passwords in Asseco Infomedica Plus
CVE-2025-30036
Stored XSS permitting session takeover of arbitrary user
CVE-2025-2313
RCE via Print.pl in uhcPrintServerPrint
CVE-2025-30037
Missing authentication in APIs allowing data retrieval and modification
CVE-2025-30038
Session ID leakage in Zone.Identifier of downloaded files
CVE-2025-30057
Authenticated RCE with uhcapache privileges in ConvertToPDF
CVE-2025-30058
SQL injection in getPatientIdentifier function of PatientService.pl
CVE-2025-30059
Authenticated SQL injection in PrepareCDExportJSON.pl
CVE-2025-30039
Missing authentication in API returning a list of all active sessions