The Official Site Of NAIT (Native AI Teams)

Tag: WebApplicationSecurity

  • Vulnerability Watch No71

    SPIP Flaw Enables Remote Code Execution at Critical Severity • SPIP Authorization Bypass Allows Administrator Account Takeover • SPIP Sitemap SQL Injection Exposes Database Secrets • Laci Synchroni OAuth Bug Enables User Impersonation • MoguBlog Authorization Flaw Allows Comment Deletion…

    ,

  • Vulnerability Watch No70

    WooCommerce Plugin Flaw Exposes Arbitrary Files • WordPress Plugin Bug Enables Account Takeover • Editor Upload Vulnerability May Enable Code Execution • Velociraptor Backup Flaw Allows Elevated Query Execution • Critical Permission Bypass Impacts Endpoint Control…

    ,

  • Vulnerability Watch No63

    Critical TOTOLINK NR1800X Buffer Overflow Exposes Remote Attack Surface • Medicine Delivery Password Recovery Hit by SQL Injection • Product Category Filter in Medicine Delivery App Vulnerable to SQL Injection • AshPhoenix Tenant Authorization Bug Can Bypass Scoped Access Checks • Medicine Delivery Product Detail Page Exposes SQL Injection…

    ,

  • Vulnerability Watch No54

    acmailer Authorization Flaw Enables Admin-Level Sub-Accounts • Atarim WordPress Plugin File Deletion Can Lead to RCE • TRENDnet Router Ping Interface Exposed to Command Injection • armeria-xds TLS Verification Flaw Enables MITM Attacks • TRENDnet TEW-823DRU Admin Endpoint Allows Command Injection…

    ,

  • Vulnerability Watch No52

    WordPress WPAdverts Authorization Bypass Exposes Site Configuration • COMFAST Router Flaw Enables Remote OS Command Injection • PHPGurukul Complaint System Hit by Remote SQL Injection • SourceCodester Timetabling System Exposes SQL Injection Flaw • Second SourceCodester Timetabling Endpoint Vulnerable to SQL Injection…

    ,

  • Vulnerability Watch No48

    WordPress Frontend Admin Flaw Enables Administrator Takeover • Royal Elementor Addons SSRF Exposes Internal Services • Podlove File Deletion Flaw Can Lead to Remote Code Execution • ProSolution WP Client Upload Bug Enables Unauthenticated RCE • Autopay WordPress Plugin Allows Unauthenticated Stored XSS…

    ,

  • Vulnerability Watch No35

    MingSoft MCMS SQL Injection Exposes Remote Attack Surface • node-sql-query SQL Injection Fixed in 0.1.29 • Aitemi M300 Command Injection Enables Remote Attacks • Tenda CH22 Command Injection Disclosed Publicly • Task Management System Hit by SQL Injection…

    ,

  • Vulnerability Watch No24

    Brace Expansion Bypass Enables Memory Exhaustion • Angular i18n Flaw Turns Translations into JavaScript • Angular Server Rendering Exposes High-Severity XSS • Angular Cache-Key Collision Can Return the Wrong Data • OpenEMR OAuth Flow Bypasses Multi-Factor Authentication…

    ,

  • Vulnerability Watch No19

    Xendit Payment Access-Control Flaw Exposes Unauthenticated Attack Surface • Contest Gallery Hit by Unauthenticated XSS Vulnerability • Kali Forms Vulnerable to Unauthenticated Script Injection • BackWPup XSS Flaw Threatens WordPress Administrators • FormCraft SSRF Flaw Could Reach Internal Services…

    ,