Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-103038

PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.

CVSS 4.0 · 8.6 High EPSS 3.4% KEV · Not listed
Vendors
Streamsoft
Products
Pingtools Network Utilities
CVE-2026-50641

Plaintext password storage in Streamsoft Business Intelligence

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Streamsoft
Products
Business Intelligence
CVE-2026-0809

Weak KSeF token encoding in Streamsoft Prestiż

Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Streamsoft
Products
Streamsoft Prestiż