83 matches found
appmon
¡Bienvenido a AppMon! Como se vio en US & EU AppMon es un marco automatizado para monitorizar y alterar las llamadas a la API del sistema de aplicaciones nativas de macOS, iOS y Android. Está basado en Frida. Este proyecto solo fue posible gracias a Ole André Vadla Ravnås y se lo dedico a él...
CVE-2026-82909
A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration. The attack may be performed from remote...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
EUVD-2025-210791
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments. This flaw allows for unauthorize...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2026-8476 Disk Cache Deserialization Remote Code Execution Vulnerability
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads function to deserialize cached objects from disk without validation, integrity verification, or...
EUVD-2026-4950
Budibase is a low code platform for creating internal tools, workflows, and admin panels. In versions up to and including 3.26.3, a Creator-level user, who normally has no UI permission to invite users, can manipulate API requests to invite new users with any role, including Admin, Creator, or Ap...
EUVD-2024-45394
Malicious code in bioql PyPI...
EUVD-2023-34332
Malicious code in bioql PyPI...
EUVD-2024-16576
Malicious code in bioql PyPI...
EUVD-2023-12615
Malicious code in bioql PyPI...
EUVD-2022-52449
Malicious code in bioql PyPI...
EUVD-2025-23283
Malicious code in bioql PyPI...
EUVD-2023-34350
Malicious code in bioql PyPI...
EUVD-2025-20986
Malicious code in bioql PyPI...
EUVD-2024-41600
Malicious code in bioql PyPI...