← All credits
Moritz Abrell, Christian Zäske from SySS GmbH
7 vulnerability records and advisories credit this contributor.
CVE-2026-33617
MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint
CVE-2026-33615
MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint
CVE-2026-33613
MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray
CVE-2026-33614
MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint
CVE-2026-33616
MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint
CVE-2026-32969
Pre-Auth Blind SQLi in userinfo Endpoint
CVE-2026-32968
Unauthenticated RCE in com_mb24sysapi