-
Vulnerability Watch No63
Critical TOTOLINK NR1800X Buffer Overflow Exposes Remote Attack Surface • Medicine Delivery Password Recovery Hit by SQL Injection • Product Category Filter in Medicine Delivery App Vulnerable to SQL Injection • AshPhoenix Tenant Authorization Bug Can Bypass Scoped Access Checks • Medicine Delivery Product Detail Page Exposes SQL Injection…
-
Vulnerability Watch No49
Scriban Parser Recursion Can Crash Hosting Processes • Circular Objects Trigger Fatal Scriban Stack Exhaustion • Nested Arrays Bypass Scriban Expression Depth Protection • Scriban Template Cache Can Leak Previously Authorized Content • Scriban Cache Flaw Breaks MemberFilter Sandbox Boundaries…
-
Vulnerability Watch No40
Velociraptor Permission Bypass Enables Analyst-to-Investigator Escalation • Socket Syscall TOCTOU Race Can Corrupt Kernel Heap Memory • VentraConnect WordPress Login Flaw Enables Administrator Takeover • RHACM Channel Flaw Exposes Cross-Tenant Secrets and ConfigMaps • Multicloud Integrations Flaw Can Force Malicious ArgoCD Synchronization…
-
Vulnerability Watch No9
PraisonAI Workspace Isolation Flaw Allows Cross-Tenant Access • PraisonAI Platform JWT Secret Flaw Enables Account Takeover • PraisonAI Platform Member Removal Authorization Bypass • PraisonAI Platform Critical Workspace Access Control Failure • PraisonAI Dependency API IDOR Exposes Workspace Boundaries…