Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

HGiga Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-93468`HGiga｜OAKlouds - Arbitrary File Read	Exploitation statusNot confirmed	FixYes	Affected productOAKlouds-bulletin_v3-2.0	Published09/18/2026	SeverityHigh
`CVE-2026-93467`HGiga｜OAKlouds - Insecure Deserialization	Exploitation statusNot confirmed	FixYes	Affected productOAKlouds-custom_page-2.0	Published09/18/2026	SeverityCritical
`CVE-2026-6349`HGiga｜iSherlock - OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock-base-4.5	Published04/16/2026	SeverityCritical
`CVE-2026-2236`HGiga｜C&Cm@il - SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productC&Cm@il package olln-base	Published02/09/2026	SeverityHigh
`CVE-2026-2235`HGiga｜C&Cm@il - SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productC&Cm@il package olln-base	Published02/09/2026	SeverityHigh
`CVE-2026-2234`HGiga｜C&Cm@il - Missing Authentication	Exploitation statusNot known exploited	FixYes	Affected productC&Cm@il package olln-base	Published02/09/2026	SeverityCritical
`CVE-2025-11900`HGiga｜iSherlock - OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published10/17/2025	SeverityCritical
`CVE-2025-7451`Hgiga｜iSherlock - OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock-maillog-4.5	Published07/14/2025	SeverityCritical
`CVE-2025-3364`HGiga PowerStation - Chroot Escape	Exploitation statusNot known exploited	FixYes	Affected productPowerStation	Published04/08/2025	SeverityMedium
`CVE-2025-3363`HGiga iSherlock - OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/08/2025	SeverityCritical
`CVE-2025-3362`HGiga iSherlock - OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/08/2025	SeverityCritical
`CVE-2025-3361`HGiga iSherlock - OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/08/2025	SeverityCritical
`CVE-2025-2150`HGiga C&Cm@il - Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productC&Cm@il	Published03/10/2025	SeverityMedium
`CVE-2024-9924`Hgiga OAKlouds - Arbitrary File Read And Delete	Exploitation statusNot known exploited	FixYes	Affected productOAKlouds	Published10/14/2024	SeverityCritical
`CVE-2024-4299`HGiga iSherlock - Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/29/2024	SeverityHigh
`CVE-2024-4298`HGiga iSherlock - Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/29/2024	SeverityHigh
`CVE-2024-4297`HGiga iSherlock - Arbitrary File Download	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/29/2024	SeverityMedium
`CVE-2024-4296`HGiga iSherlock - Arbitrary File Download	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published04/29/2024	SeverityMedium
`CVE-2024-26261`Hgiga OAKlouds - Arbitrary File Read And Delete	Exploitation statusNot known exploited	FixYes	Affected productOAKlouds	Published02/15/2024	SeverityCritical
`CVE-2024-26260`Hgiga OAKlouds - Command Injection	Exploitation statusNot known exploited	FixYes	Affected productOAKlouds	Published02/15/2024	SeverityCritical
`CVE-2023-37292`HGiga iSherlock - Command Injection	Exploitation statusNot known exploited	FixYes	Affected productiSherlock 4.5	Published07/21/2023	SeverityCritical
`CVE-2023-24839`HGiga MailSherlock - Reflected XSS	Exploitation statusNot known exploited	FixYes	Affected productMailSherlock	Published03/27/2023	SeverityMedium
`CVE-2023-24842`HGiga MailSherlock - Broken Access Control	Exploitation statusNot known exploited	FixYes	Affected productMailSherlock	Published03/27/2023	SeverityMedium
`CVE-2023-24841`HGiga MailSherlock - Command Injection	Exploitation statusNot known exploited	FixYes	Affected productMailSherlock	Published03/27/2023	SeverityHigh
`CVE-2023-24837`HGiga PowerStation - Command Injection	Exploitation statusNot known exploited	FixYes	Affected productPowerStation	Published03/27/2023	SeverityHigh
`CVE-2023-24838`HGiga PowerStation - Information Leakage	Exploitation statusNot known exploited	FixYes	Affected productPowerStation	Published03/27/2023	SeverityCritical
`CVE-2023-24840`HGiga MailSherlock - SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productMailSherlock	Published03/27/2023	SeverityHigh
`CVE-2023-25909`HGiga Inc. OAKlouds - Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Affected productHGiga OAKlouds	Published03/27/2023	SeverityCritical
`CVE-2022-38118`HGiga OAKlouds - SQL Injection	Exploitation statusNot confirmed	FixYes	Affected productOAKlouds	Published08/30/2022	SeverityHigh
`CVE-2021-37913`HGiga OAKlouds - Command Injection-2	Exploitation statusNot confirmed	FixYes	Affected productOAKlouds OAKSv2	Published09/15/2021	SeverityCritical
`CVE-2021-37912`HGiga OAKlouds - Command Injection-1	Exploitation statusNot confirmed	FixYes	Affected productOAKlouds OAKSv2	Published09/15/2021	SeverityCritical
`CVE-2021-22848`HGiga MailSherlock - SQL Injection-2	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published03/18/2021	SeverityHigh
`CVE-2021-22852`HGiga OAKloud Portal - SQL injection -2	Exploitation statusNot confirmed	FixYes	Affected productOAKSv20 OAKlouds-mol_course_v3 2.0	Published01/19/2021	SeverityHigh
`CVE-2021-22851`HGiga OAKloud Portal - SQL injection -1	Exploitation statusNot confirmed	FixYes	Affected productOAKSv20 OAKlouds-document_v3 2.0	Published01/19/2021	SeverityCritical
`CVE-2021-22850`HGiga OAKloud Portal - Security Misconfiguration	Exploitation statusNot confirmed	FixYes	Affected productOAKSv20 OAKlouds-document_v3	Published01/19/2021	SeverityMedium
`CVE-2020-35851`HGiga MailSherlock - Command Injection	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityHigh
`CVE-2020-35743`HGiga MailSherlock - SQL Injection -3	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityHigh
`CVE-2020-35742`HGiga MailSherlock - SQL Injection -1	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityHigh
`CVE-2020-35741`HGiga MailSherlock - XSS -2	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityHigh
`CVE-2020-35740`HGiga MailSherlock - XSS -1	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityHigh
`CVE-2020-25850`HGiga MailSherlock - Arbitrary File Download	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityHigh
`CVE-2020-25848`HGiga MailSherlock - Broken Authentication	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR45/SSR45	Published12/31/2020	SeverityCritical
`CVE-2020-10512`HGiga C&Cmail - SQL Injection	Exploitation statusNot confirmed	FixYes	Affected productC&Cmail	Published04/15/2020	SeverityHigh
`CVE-2020-10511`HGiga C&Cmail - Broken Access Control	Exploitation statusNot confirmed	FixYes	Affected productC&Cmail	Published04/15/2020	SeverityCritical
`CVE-2019-9882`Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist.	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR35	Published06/03/2019	SeverityUnknown
`CVE-2019-9883`Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account.	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock MSR35	Published06/03/2019	SeverityUnknown
`CVE-2018-17542`SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds	Exploitation statusNot confirmed	FixYes	Affected productMailSherlock	Published02/11/2019	SeverityMedium