Category: Security

  • Vulnerability Watch No5

    fast-uri URL Parsing Flaw Can Bypass Host-Based Security Checks • SQL Injection Found in SourceCodester Class and Exam Timetabling System • Public SQL Injection Vulnerability Impacts SourceCodester Timetabling System • uproot Code Generation Bug Enables Arbitrary Python Execution • Fastify Reply Plugin Cache Collision Risks Cross-Upstream Access…

  • Vulnerability Watch No4

    Missing Authentication Flaw in SimpleUI AjaxAdmin • Gerapy Project Upload Endpoint Authentication Bypass • Authorization Bug Exposes RT-Claw RPC Handler • QueryWeaver Signup Flow Authentication Bypass • SQL Injection in Class and Exam Timetabling System…

  • Vulnerability Watch No3

    Netty STOMP Header Flood Can Crash Servers • Hard-Coded Credentials Found in IBM Langflow OSS • IBM Langflow File Boundary Bypass Exposes User Data • Path Traversal Enables Arbitrary File Writes in Langflow • Langflow Privilege Escalation Can Fully Compromise Service…

  • Vulnerability Watch No2

    Remote Buffer Overflow in Shibby Tomato Scheduler • Remote Stack Overflow Found in Shibby Tomato • Out-of-Bounds Write Threatens Shibby Tomato Routers • Directory Traversal Bug Hits VMware Avi Load Balancer • Privilege Escalation Can Lead to Remote Code Execution…

  • Vulnerability Watch No1

    JLine Telnet Server Heap Exhaustion Flaw Hits Java Apps • Windows RDP Privacy Leak Exposes Private Information • HAPI FHIR Regex Bug Can Trigger Healthcare Service Outages • Avo Rails Framework Authorization Bypass Enables Data Exposure • ViewComponent XSS Flaw Risks Unsafe Rails Output…