The Official Site Of NAIT (Native AI Teams)

Tag: UnauthenticatedAttack

  • Vulnerability Watch No37

    Discourse Rich Text Editor Flaw Enables Stored XSS • Multicluster Global Hub Flaw Lets Compromised Hubs Falsify Data • Malicious Git Config Can Trigger Code Execution in Goose Review • SPIP SQLite Installations Exposed to Authenticated Command Execution • Malicious use-context-selector Commits Compromised Developer Machines…

    ,

  • Vulnerability Watch No34

    lollms Path Traversal Exposes Arbitrary Server Files • MSI Radix AXE6600 OpenVPN Flaw Enables Root Command Execution • MSI Radix AXE6600 Mac Filter Bug Allows Root Commands • MSI Router Telnet Configuration Flaw Leads to Root Access • MSI Router SSH Configuration Flaw Enables Root Command Injection…

    ,

  • Vulnerability Watch No31

    V-Secure Jingyun Antivirus Kernel Driver Access-Control Flaw • Jiangmin Antivirus Minifilter Driver Access-Control Vulnerability • DeepCool DisplayService Improper Access-Control Flaw • StableBit DrivePool Service Permission Flaw Exposes Local Systems • TrueBooker WordPress Flaw Lets Attackers Take Over Admin Accounts…

    ,

  • Vulnerability Watch No30

    Quadratic HTML Traversal Enables Remote Resource Exhaustion • Malformed CSS Can Stall html_sanitize_ex Servers • Forged JWT Claims Bypass Neo4j GraphQL Subscription Controls • Unauthenticated Command Can Terminate Ground Station • OpenChamber Shutdown Endpoint Skips Authentication…

    ,

  • Vulnerability Watch No29

    Forminator Upload-Record Flaw Enables Stored XSS • File Manager Flaw Can Delete Server Files and Enable RCE • NanoClaw Path Traversal Exploit Is Public • LettaBot API Status Route Lacks Authentication • Super Agent Party Proxy Route Exposes SSRF Flaw…

    ,

  • Vulnerability Watch No27

    H3C NX15 Web API Exposes Dangerous Routine • UTT HiPER 1200GW Hit by Remote Buffer Overflow • UTT HiPER 1250GW TempName Overflow Exposed • UTT HiPER 1250GW 5 GHz Endpoint Overflow • ESAFENET CDG KeyID Parameter Enables SQL Injection…

    ,

  • Vulnerability Watch No26

    Flowise Permission Flaw Enables Cross-Type Flow Deletion • Flowise SQLite Path Override Leads to Root Command Execution • Public Flowise Chatflows Exposed to Configuration Injection • Flowise IPv6 Parsing Bypass Opens the Door to SSRF • Flowise CSV Agent Pickle Bypass Enables Command Execution…

    ,

  • Vulnerability Watch No25

    Crafted Images Can Trigger GIMP Memory Corruption • Zyxel Firewall Path Traversal Enables Malicious Config Execution • Zyxel WAX650S Command Injection Exposes Device OS • Node.js HTTP2 Flaw Enables Remote Memory Exhaustion • CustomSounds Path Traversal Exposes Arbitrary Files…

    ,

  • Vulnerability Watch No20

    TinyWeb Path Traversal Exposes Sensitive Server Files • Malformed Requests Can Crash TinyWeb Servers • Ordinary Requests Can Exhaust TinyWeb Memory • Rouille Request Smuggling Can Bypass Access Controls • QTI Neon Relay Amplification Threatens Game Hosts…

    ,

  • Vulnerability Watch No19

    Xendit Payment Access-Control Flaw Exposes Unauthenticated Attack Surface • Contest Gallery Hit by Unauthenticated XSS Vulnerability • Kali Forms Vulnerable to Unauthenticated Script Injection • BackWPup XSS Flaw Threatens WordPress Administrators • FormCraft SSRF Flaw Could Reach Internal Services…

    ,