Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowing unauthenticated access. Because the function accepts a caller-supplied user UUID without verifying it matches the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. Unauthenticated attackers knowing only a victim's…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService (e.g. BackupService::deleteBackup()) concatenate the user-supplied backup_file/filename value directly onto the backup directory path…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowing unauthenticated access. Because the function accepts a caller-supplied user UUID without verifying it matches the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. Unauthenticated attackers knowing only a victim's…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService (e.g. BackupService::deleteBackup()) concatenate the user-supplied backup_file/filename value directly onto the backup directory path…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,82 % · rekomendacja wg zapisanej polityki