Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: HAMASTAR Technology Clear all filters
TI-2026-01044 CVE-2026-1332 · GHSA-jxp4-5wxx-jhhf

HAMASTAR Technology｜MeetingHub - Missing Authentication

Priority LOW 37

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00453 Published 2026-01-22 No fix listed CWE-306
TI-2026-01043 CVE-2026-1331 · GHSA-j7qw-w5vf-rgxv

AMASTAR Technology｜MeetingHub - Arbitrary File Upload

Priority MEDIUM 49

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on th…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00748 Published 2026-01-22 No fix listed CWE-434
TI-2026-01042 CVE-2026-1330 · GHSA-v3x6-95pf-f2f2

HAMASTAR Technology｜MeetingHub - Arbitrary File Read

Priority MEDIUM 45

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00661 Published 2026-01-22 No fix listed CWE-36
TI-2025-05579 CVE-2025-6169 · GHSA-gpg7-49w7-q7wr

HAMASTAR Technology WIMP website co-construction management platform - SQL Injection

Priority MEDIUM 49

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete data…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00526 Published 2025-06-16 No fix listed CWE-89
TI-2024-05669 CVE-2024-6118 · GHSA-xpwg-9vrv-hq2j

Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password

Priority MEDIUM 47

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XM…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00484 Published 2024-08-05 No fix listed CWE-256
TI-2024-05668 CVE-2024-6117 · GHSA-4r7h-hv98-vx5w

Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type

Priority MEDIUM 43

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a c…

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00523 Published 2024-08-05 No fix listed CWE-434