The Official Site Of NAIT (Native AI Teams)

Tag: pathTraversal

  • Vulnerability Watch No72

    GitLab Duo Chat Flaw Exposes Sensitive Search Credentials • GitLab Repository API Bug Allows Unauthenticated File Reads • stb_vorbis Heap Overflow Can Corrupt Memory • OpenStack Keystone Delegated Tokens Expose Credentials • Default Admin Password Leaves Inventory Component Exposed…

    ,

  • Vulnerability Watch No71

    SPIP Flaw Enables Remote Code Execution at Critical Severity • SPIP Authorization Bypass Allows Administrator Account Takeover • SPIP Sitemap SQL Injection Exposes Database Secrets • Laci Synchroni OAuth Bug Enables User Impersonation • MoguBlog Authorization Flaw Allows Comment Deletion…

    ,

  • Vulnerability Watch No70

    WooCommerce Plugin Flaw Exposes Arbitrary Files • WordPress Plugin Bug Enables Account Takeover • Editor Upload Vulnerability May Enable Code Execution • Velociraptor Backup Flaw Allows Elevated Query Execution • Critical Permission Bypass Impacts Endpoint Control…

    ,

  • Vulnerability Watch No68

    Critical cjose JWE Flaw Exposes Encrypted Data • cjose AES Key Wrap Bug Enables Heap Corruption • Maravel JWT Cache Issue Allows Token Replay • OPNsense NTP Module Bug Allows Root File Writes • n8n Expression Engine Flaw Risks Code Execution…

    ,

  • Vulnerability Watch No65

    undici Cache Bug Enables Cross-Origin Data Exposure • undici TLS Validation Bypass Hits BalancedPool • PowerJob Worker Unauthenticated RCE Exposes Servers • IBM ContextForge Session Leak Exposes Data • IBM ContextForge Bug Allows Credential Theft…

    ,

  • Vulnerability Watch No63

    Critical TOTOLINK NR1800X Buffer Overflow Exposes Remote Attack Surface • Medicine Delivery Password Recovery Hit by SQL Injection • Product Category Filter in Medicine Delivery App Vulnerable to SQL Injection • AshPhoenix Tenant Authorization Bug Can Bypass Scoped Access Checks • Medicine Delivery Product Detail Page Exposes SQL Injection…

    ,

  • Vulnerability Watch No60

    AWX Archive Extraction Path Traversal • HCL Hive Third-Party Component Vulnerability • GIMP PCX Plugin Memory Corruption Bug • rConfig Authentication Bypass Creates Admin Accounts • NetworkManager WPA-Enterprise Validation Flaw…

    ,

  • Vulnerability Watch No59

    Joomla Fabrik List Controller Allows Unauthorized Data Deletion • Joomla Fabrik Reveals Database Structure to Unauthenticated Users • Joomla Fabrik Allows Unauthenticated Directory Listing • Joomla Fabrik Permits Unauthenticated File Uploads • WordPress WS Form Plugin Exposes Critical PHP Object Injection Flaw…

    ,

  • Vulnerability Watch No58

    LeafWiki Account Update Bug Enables Role Escalation • RaTeX Parser Crash Creates Denial of Service Risk • WordPress Plugin Flaw Enables Privilege Escalation • WeeChat Authentication Timing Bug Exposes Hashes • LeafWiki File Traversal Bug Can Expose Local Data…

    ,

  • Vulnerability Watch No55

    FFmpeg DASH Demuxer Vulnerable to Negative Array Index • FFmpeg AV1 RTP Packetizer Out-of-Bounds Read • FFmpeg VC-2 RTP Packetizer Heap Overflow • Critical FFmpeg RIST Reader Heap Buffer Overflow • FFmpeg MPEG-PS Muxer Stack Buffer Overflow…

    ,