The Official Site Of NAIT (Native AI Teams)

Tag: AuthenticationBypass

  • Vulnerability Watch No74

    NewStatPress WordPress Plugin Exposes Admins to Stored XSS • FV Flowplayer Video Player Plugin Vulnerable to Stored XSS • Gmedia Photo Gallery SQL Injection Exposes WordPress Databases • Smart Forms WordPress Plugin Allows Unauthenticated Script Injection • Form Maker by 10Web Exposes Databases to Blind SQL Injection…

    ,

  • Vulnerability Watch No72

    GitLab Duo Chat Flaw Exposes Sensitive Search Credentials • GitLab Repository API Bug Allows Unauthenticated File Reads • stb_vorbis Heap Overflow Can Corrupt Memory • OpenStack Keystone Delegated Tokens Expose Credentials • Default Admin Password Leaves Inventory Component Exposed…

    ,

  • Vulnerability Watch No70

    WooCommerce Plugin Flaw Exposes Arbitrary Files • WordPress Plugin Bug Enables Account Takeover • Editor Upload Vulnerability May Enable Code Execution • Velociraptor Backup Flaw Allows Elevated Query Execution • Critical Permission Bypass Impacts Endpoint Control…

    ,

  • Vulnerability Watch No67

    DeepSeek Harness Authentication Bypass Grants Full Agent Control • MongoDB Router Resource Exhaustion Bug Can Cause Service Disruption • MongoDB Storage Configuration Flaw Risks Crashes and Code Execution • MongoDB Authorization Bug Could Allow Administrative Takeover • MongoDB Replica Set Assertion Issue Triggers Remote Crashes…

    ,

  • Vulnerability Watch No65

    undici Cache Bug Enables Cross-Origin Data Exposure • undici TLS Validation Bypass Hits BalancedPool • PowerJob Worker Unauthenticated RCE Exposes Servers • IBM ContextForge Session Leak Exposes Data • IBM ContextForge Bug Allows Credential Theft…

    ,

  • Vulnerability Watch No62

    Magma Integrity Validation Flaw Exposes Remote Attack Surface • ash_postgres Tenant Rename Flaw Can Cross Data Boundaries • Admidio Blind SQL Injection Exposes Credentials • SiYuan Block Metadata Enables Stored Script Execution • SiYuan Stored XSS Targets Package and Notebook Workflows…

    ,

  • Vulnerability Watch No60

    AWX Archive Extraction Path Traversal • HCL Hive Third-Party Component Vulnerability • GIMP PCX Plugin Memory Corruption Bug • rConfig Authentication Bypass Creates Admin Accounts • NetworkManager WPA-Enterprise Validation Flaw…

    ,

  • Vulnerability Watch No58

    LeafWiki Account Update Bug Enables Role Escalation • RaTeX Parser Crash Creates Denial of Service Risk • WordPress Plugin Flaw Enables Privilege Escalation • WeeChat Authentication Timing Bug Exposes Hashes • LeafWiki File Traversal Bug Can Expose Local Data…

    ,

  • Vulnerability Watch No57

    Monkeytype Rate Limit Bypass Enables Abuse • Plate DOCX Conversion Flaw Exposes Internal Services • Link Preview JS DNS Rebinding Bypasses SSRF Protection • dbx Authentication Bypass Enables Database Takeover • NanaZip Archive Parsing Bug Risks Data Exposure…

    ,

  • Vulnerability Watch No53

    Kubernetes managed-serviceaccount flaw exposes cluster secrets • OpenSearch Dashboards request flaw enables remote denial of service • Dell PowerStore SDNAS NFS flaw can enable command execution • RabbitMQ Java client nesting bug triggers pre-authentication crashes • RabbitMQ Java client flaw enables massive pre-auth memory allocation…

    ,