Tag: authenticatedAttack

  • Vulnerability Watch No47

    Hard-Coded Credentials Expose LB-LINK X-PRO • SQL Injection Hits SourceCodester Timetabling System • Fastify Multipart Flaw Enables Persistent Disk Exhaustion • Fastify Multipart Bug Can Exhaust Disk and Event Loop • Fastify JWT Key Override Breaks Authorization Boundaries…

  • Vulnerability Watch No45

    CrateDB Blob API Bypasses Table Privileges • Malicious Projects Can Trigger Code Execution in Cortex MCP • Recursive Jinja Rendering Enables Command Execution in compliance-trestle • Public Exploit Targets TOTOLINK A800R DHCP Handler • Public Exploit Exposes TOTOLINK A800R IPv6 Stack Overflow…

  • Vulnerability Watch No41

    Critical Microsoft UFO Flaw Exposes ADB-Connected Android Devices • Nagios Notification Macros Enable Authenticated RCE • Nagios NRDP Macro Injection Opens Path to RCE • Nagios CSRF Bypass Can Trigger Commands as Authorized Users • IBM i Navigator Spoofing Flaw Enables Credential Harvesting…

  • Vulnerability Watch No24

    Brace Expansion Bypass Enables Memory Exhaustion • Angular i18n Flaw Turns Translations into JavaScript • Angular Server Rendering Exposes High-Severity XSS • Angular Cache-Key Collision Can Return the Wrong Data • OpenEMR OAuth Flow Bypasses Multi-Factor Authentication…

  • Vulnerability Watch No20

    TinyWeb Path Traversal Exposes Sensitive Server Files • Malformed Requests Can Crash TinyWeb Servers • Ordinary Requests Can Exhaust TinyWeb Memory • Rouille Request Smuggling Can Bypass Access Controls • QTI Neon Relay Amplification Threatens Game Hosts…

  • Vulnerability Watch No3

    Netty STOMP Header Flood Can Crash Servers • Hard-Coded Credentials Found in IBM Langflow OSS • IBM Langflow File Boundary Bypass Exposes User Data • Path Traversal Enables Arbitrary File Writes in Langflow • Langflow Privilege Escalation Can Fully Compromise Service…