PT-2026-96102

Name of the Vulnerable Software and Affected Versions Beszel versions prior to 0.19.0 Description An insecure direct object reference occurs in the 'POST' and 'DELETE' '/api/beszel/user-alerts' endpoints. This allows authenticated users to create or delete alerts for systems they are not authoriz...

EUVD-2021-29069

Malicious code in bioql PyPI...

PT-2024-21816

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 3.0.4 Apache Superset versions 3.1.0 through 3.1.1 Description An authenticated user with privileges to create alerts on Alerts & Reports can generate a specially crafted SQL statement that triggers an error o...

PT-2023-12398 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an authenticated attacker to create alerts that trigger a stored XSS attack. This means an attacker with authentication credentials can...