41 matches found
MINI-8QPV-6583-JH6X
Bulletin has no description...
CVE-2026-6583
A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14. This affects the function deleteapikey/editapikey of the file superagi/controllers/apikey.py of the component API Key Management Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carri...
CVE-2026-6583
creationtimestamp| type| source ---|---|--- 2026-04-20 00:13:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjv6pknaq72e...
CVE-2026-6583 TransformerOptimus SuperAGI API Key Management Endpoint api_key.py edit_api_key authorization
A vulnerability has been found in TransformerOptimus SuperAGI up to 0.0.14. This affects the function deleteapikey/editapikey of the file superagi/controllers/apikey.py of the component API Key Management Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carri...
CVE-2026-6583
The CVE-2026-6583 entry concerns TransformerOptimus SuperAGI (up to version 0.0.14) with a vulnerability in the API Key Management Endpoint (file superagi/controllers/api_key.py) affecting the delete_api_key/edit_api_key functionality. The issue enables an authorization bypass and is exploitable ...
GHSA-CXXF-6583-J227 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-6583
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-6583
creationtimestamp| type| source ---|---|--- 2025-06-25 00:49:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19414 2025-06-25 02:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfkedzfow2v...
CVE-2025-6583
A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /view-appointment.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2020-6583
BigProf Online Invoicing System OIS through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve the session cookie from the administrator login, and take over the administrator account via the Name field in an Add New Client action...
CVE-2006-6583
ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...
CVE-2024-6583
A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request...
CVE-2024-6583 Path Traversal in stangirard/quivr
A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request...
CVE-2024-6583
CVE-2024-6583 describes a path traversal vulnerability in the latest version of stangirard/quivr, enabling an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the upload request path. The root cause is related to insufficient validation of the destination path in the up...
frr security update
7.5.1-22.0.1 - Fix POSTIN scriptlet Orabug: 34712485 - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgpflowspec.c - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgplabel.c - Resolves: RHEL-15869 - crash from specially crafted MPUNREACHNLRI-containing BGP UPDATE message - Resolves:...
Ubuntu 16.04 ESM / 18.04 ESM : MySQL vulnerabilities (USN-6583-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6583-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been...
CVE-2023-6583
The WordPress Import and export users and customers plugin is affected by CVE-2023-6583. It allows Directory Traversal via the Recurring Import feature in all versions up to 1.24.2, enabling an authenticated attacker with Administrator+ privileges to read and delete arbitrary files (including wp-...
Oracle Linux 9 : kernel (ELSA-2023-6583)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6583 advisory. - A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the fi...
CVE-2020-6583
CVE-2020-6583 affects BigProf Online Invoicing System (OIS) up to version 2.6. The vulnerability is a cross-site scripting (XSS) flaw that enables an attacker to hijack an administrator session by retrieving the session cookie through the Name field in an Add New Client action. The exploitation p...