The Official Site Of NAIT (Native AI Teams)

Tag: accessControl

  • Vulnerability Watch No30

    Quadratic HTML Traversal Enables Remote Resource Exhaustion • Malformed CSS Can Stall html_sanitize_ex Servers • Forged JWT Claims Bypass Neo4j GraphQL Subscription Controls • Unauthenticated Command Can Terminate Ground Station • OpenChamber Shutdown Endpoint Skips Authentication…

    ,

  • Vulnerability Watch No28

    Cisco IOS XE Resource-Lifecycle Control Flaw • IBM Langflow MCP Endpoint Authentication Bypass • Cisco Catalyst SD-WAN File Access Link Flaw • Cisco Catalyst SD-WAN Stores Sensitive Data in Cleartext • Critical Cisco Catalyst SD-WAN Link Resolution Vulnerability…

    ,

  • Vulnerability Watch No26

    Flowise Permission Flaw Enables Cross-Type Flow Deletion • Flowise SQLite Path Override Leads to Root Command Execution • Public Flowise Chatflows Exposed to Configuration Injection • Flowise IPv6 Parsing Bypass Opens the Door to SSRF • Flowise CSV Agent Pickle Bypass Enables Command Execution…

    ,

  • Vulnerability Watch No21

    Hardcoded Backdoor Exposes WordPress Sites to Admin Takeover • Easy Digital Downloads Upload Flaw Could Enable Code Execution • WooCommerce Wholesale Plugin Lets Authors Become Administrators • Netty OCSP Race Can Leak Data to Revoked Servers • Netty Accepts Replayed Expired OCSP Responses…

    ,

  • Vulnerability Watch No16

    NoteGen Shell Permissions Enable Full Remote Code Execution • Unsanitized AI Responses Expose NoteGen Users to XSS • WordPress Membership Flaw Lets Visitors Claim Elevated Roles • Critical SQL Injection Hits WordPress Issue-Tracking Plugin • CAFEHAUS API Bug Enables Administrator Account Takeover…

    ,

  • Vulnerability Watch No15

    Pre-Auth Heap Overflow in libssh2 Clients • libssh2 Bounds Check Bug Leaks Memory • Stored XSS Hits Loytec OPC XML-DA • Loytec Privilege Management Flaw Enables Password Resets • Critical Symlink Attack Leads to Root on Loytec…

    ,

  • Vulnerability Watch No14

    Exim .forward Flaw Enables Privilege Escalation • Exim Directory Traversal Leads to Privilege Gain • OpenStack Ironic Agent Exposed to Code Execution • WordPress Wpify Woo Plugin Allows Admin Takeover • Azure DNS Authorization Flaw Rated Critical…

    ,

  • Vulnerability Watch No13

    Critical Joomla Easy Store SQL Injection Exposes Databases • Joomla Easy Store Flaw Reveals Other Customers Orders • Joomla Easy Store Payment Forgery Bug Enables Order Manipulation • Proxygen HTTP2 Bug Can Trigger Memory Exhaustion DoS • CyberPanel Backup IDOR Lets Users Access Other Tenants…

    ,

  • Vulnerability Watch No12

    Fastify Static Path Traversal Guard Bypass • facil.io WebSocket Parser Input Validation Flaw • Oracle Fusion Middleware Java Platform Takeover Risk • Oracle Java Security Component HTTP Compromise • Oracle Platform Security HTTP Takeover Vulnerability…

    ,

  • Vulnerability Watch No11

    Onlook Authorization Flaw Lets Users Access Other Projects • FFmpeg Vulkan HEVC Decoder Buffer Overflow Risks RCE • FFmpeg VobSub Parsing Bug Can Enable Code Execution • Dell PowerProtect REST API Bug Enables Privilege Escalation • Fujitsu openFT Local Privilege Escalation to Root…

    ,