The Official Site Of NAIT (Native AI Teams)

Category: Security

  • Vulnerability Watch No15

    Pre-Auth Heap Overflow in libssh2 Clients • libssh2 Bounds Check Bug Leaks Memory • Stored XSS Hits Loytec OPC XML-DA • Loytec Privilege Management Flaw Enables Password Resets • Critical Symlink Attack Leads to Root on Loytec…

    ,

  • Vulnerability Watch No14

    Exim .forward Flaw Enables Privilege Escalation • Exim Directory Traversal Leads to Privilege Gain • OpenStack Ironic Agent Exposed to Code Execution • WordPress Wpify Woo Plugin Allows Admin Takeover • Azure DNS Authorization Flaw Rated Critical…

    ,

  • Vulnerability Watch No13

    Critical Joomla Easy Store SQL Injection Exposes Databases • Joomla Easy Store Flaw Reveals Other Customers Orders • Joomla Easy Store Payment Forgery Bug Enables Order Manipulation • Proxygen HTTP2 Bug Can Trigger Memory Exhaustion DoS • CyberPanel Backup IDOR Lets Users Access Other Tenants…

    ,

  • Vulnerability Watch No12

    Fastify Static Path Traversal Guard Bypass • facil.io WebSocket Parser Input Validation Flaw • Oracle Fusion Middleware Java Platform Takeover Risk • Oracle Java Security Component HTTP Compromise • Oracle Platform Security HTTP Takeover Vulnerability…

    ,

  • Vulnerability Watch No11

    Onlook Authorization Flaw Lets Users Access Other Projects • FFmpeg Vulkan HEVC Decoder Buffer Overflow Risks RCE • FFmpeg VobSub Parsing Bug Can Enable Code Execution • Dell PowerProtect REST API Bug Enables Privilege Escalation • Fujitsu openFT Local Privilege Escalation to Root…

    ,

  • Vulnerability Watch No10

    Critical Unauthenticated RCE in Autel Maxi Charger • WordPress WP Foodbakery File Deletion Flaw Can Lead to RCE • Veeam Software Appliance Privilege Escalation to Root • Netty OCSP Validation Bug Enables Revocation Check Bypass • Netty HTTP2 Memory Leak Can Crash JVM…

    ,

  • Vulnerability Watch No9

    PraisonAI Workspace Isolation Flaw Allows Cross-Tenant Access • PraisonAI Platform JWT Secret Flaw Enables Account Takeover • PraisonAI Platform Member Removal Authorization Bypass • PraisonAI Platform Critical Workspace Access Control Failure • PraisonAI Dependency API IDOR Exposes Workspace Boundaries…

    ,

  • Vulnerability Watch No8

    FeliCa IC Chips Exposed by Missing Cryptographic Step • Zyxel Router Command Injection Enables OS Command Execution • Public D-Link NAS Upload Flaw Allows Remote File Uploads • D-Link DNS-320 Faces Another Remote Upload Vulnerability • D-Link DNS-320 Upload Endpoint Vulnerable to Remote Abuse…

    ,

  • Vulnerability Watch No7

    Network-AI Backup Prune Arbitrary File Deletion • xrdp DoS Bug Enables CPU Exhaustion • Network-AI Sandbox Bypass Leads to Command Execution • Network-AI MCP Server Authentication Bypass • WhatsApp MCP Server Exposes Files and Messaging…

    ,

  • Vulnerability Watch No6

    Critical GitHub Actions Supply Chain Flaw in Meshtastic • Meshtastic BLE Sync Bug Can Disable iOS Device Management • Unsafe Keras Deserialization Enables Arbitrary Code Execution

    ,