Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

24 records

Vendor: Akinsoft Clear all filters
TI-2025-06383 CVE-2025-7016 · GHSA-rgqc-2558-hgcm

Improper Access Control in Akinsoft's QR Menu

Priority MEDIUM 43

Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00346 Published 2026-01-29 Fixed in s1.05.12 CWE-284
TI-2025-06382 CVE-2025-7015 · GHSA-5hf5-c2h8-jm8p

Session Hijacking in Akinsoft's QR Menu

Priority MEDIUM 42

Session Fixation vulnerability in Akın Software Computer Import Export Industry and Trade Ltd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0024 Published 2026-01-29 Fixed in s1.05.12 CWE-384
TI-2025-02125 CVE-2025-2411 · GHSA-c284-fc48-hqw2

OTP Bypass in Akinsoft's TaskPano

Priority LOW 38

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00437 Published 2025-09-04 Fixed in v1.06.06 CWE-307
TI-2024-12121 CVE-2024-13073 · GHSA-9wmv-2c7p-59qw

XSS in Akinsoft's TaskPano

Priority LOW 21

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft TaskPano allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00299 Published 2025-09-04 No fix listed CWE-79
TI-2025-02131 CVE-2025-2417 · GHSA-vcxw-w67f-34rf

OTP Bypass in Akinsoft's e-Mutabakat

Priority LOW 38

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00437 Published 2025-09-04 Fixed in v2.02.06 CWE-307
TI-2024-12119 CVE-2024-13071 · GHSA-fx2f-wwpw-h493

XSS in Akinsoft's e-Mutabakat

Priority LOW 20

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft e-Mutabakat allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00234 Published 2025-09-04 Fixed in v2.02.06 CWE-79
TI-2025-02130 CVE-2025-2416 · GHSA-pm7h-7jrp-x78p

OTP Bypass in Akinsoft's LimonDesk

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-03 Fixed in v1.02.17 CWE-307
TI-2025-00746 CVE-2025-0878 · GHSA-g589-hq5q-555g

XSS in Akinsoft's LimonDesk

Priority LOW 21

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft LimonDesk allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00242 Published 2025-09-03 Fixed in v1.02.17 CWE-79
TI-2024-12116 CVE-2024-13068 · GHSA-26g5-rwh8-qcmq

Host Header Injection in Akinsoft's LimonDesk

Priority LOW 37

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00153 Published 2025-09-03 Fixed in v1.02.17 CWE-346
TI-2024-12114 CVE-2024-13066 · GHSA-cxmc-4262-jq82

iFrame Injection in Akinsoft's LimonDesk

Priority LOW 19

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking.

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00178 Published 2025-09-03 Fixed in v1.02.17 CWE-1021
TI-2025-02129 CVE-2025-2415 · GHSA-9598-6rg8-g969

OTP Bypass in Akinsoft's MyRezzta

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-03 Fixed in v2.05.01 CWE-307
TI-2025-01497 CVE-2025-1740 · GHSA-67x8-m7gg-j4w3

Authentication Bypass in Akinsoft's MyRezzta

Priority MEDIUM 49

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00447 Published 2025-09-03 Fixed in v2.05.01 CWE-307
TI-2024-12113 CVE-2024-13065 · GHSA-7p84-xc3f-h4hf

Business Logic Error in Akinsoft's MyRezzta

Priority LOW 27

Improper Enforcement of Behavioral Workflow, Uncontrolled Resource Consumption vulnerability in Akinsoft MyRezzta allows Input Data Manipulation, CAPEC - 125 - Flooding.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00196 Published 2025-09-03 Fixed in v2.05.01 CWE-400
TI-2024-12112 CVE-2024-13064 · GHSA-m6h2-hpg8-wccc

XSS in Akinsoft's MyRezzta

Priority LOW 19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.0019 Published 2025-09-03 Fixed in v2.05.01 CWE-79
TI-2024-12111 CVE-2024-13063 · GHSA-4h4r-6vch-g23v

IDOR in Akinsoft's MyRezzta

Priority LOW 29

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-03 Fixed in v2.05.01 CWE-639
TI-2025-02127 CVE-2025-2413 · GHSA-6j4r-889x-2cqf

OTP Bypass in Akinsoft's ProKuafor

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-02 Fixed in v1.02.08 CWE-307
TI-2025-00564 CVE-2025-0670 · GHSA-9559-p654-pm2c

IDOR in Akinsoft's ProKuafor

Priority LOW 21

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft ProKuafor allows Resource Leak Exposure.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00239 Published 2025-09-02 Fixed in v1.02.08 CWE-639
TI-2024-12025 CVE-2024-12974 · GHSA-x843-8rrp-66pv

XSS in Akinsoft's ProKuaför

Priority LOW 19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.0019 Published 2025-09-02 Fixed in v1.02.08 CWE-79
TI-2025-02128 CVE-2025-2414 · GHSA-vf28-wj7x-vmfp

OTP Bypass in Akinsoft's OctoCloud

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-02 Fixed in v1.11.01 CWE-307
TI-2025-00540 CVE-2025-0640 · GHSA-m6fw-wp2g-jwwp

IDOR in Akinsoft's OctoCloud

Priority LOW 21

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00239 Published 2025-09-02 Fixed in v1.11.01 CWE-639
TI-2024-12024 CVE-2024-12973 · GHSA-gh7p-w9vc-3vfj

Host Header Injection in Akinsoft's OctoCloud

Priority LOW 21

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00147 Published 2025-09-02 Fixed in v1.11.01 CWE-346
TI-2024-12023 CVE-2024-12972 · GHSA-mwf5-j2jc-7f3h

XSS in Akinsoft's OctoCloud

Priority LOW 19

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.0019 Published 2025-09-02 Fixed in v1.11.01 CWE-79
TI-2025-02126 CVE-2025-2412 · GHSA-2mw3-7xc5-vcfm

OTP Bypass in Akinsoft's QR Menu

Priority MEDIUM 43

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00346 Published 2025-09-01 Fixed in v1.05.12 CWE-307
TI-2023-01184 CVE-2023-1251 · GHSA-4m3j-ffjm-r66f

SQLi in Wolvox

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-03-09 Fixed in 8.02.03 CWE-89