CVE-2025-47791 Nextcloud Server's test remote endpoint is not rate limited

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server prior to 28.0.13, 29.0.10, and 30.0.3, a currently unused endpoint to verify a share recipient was not protected correctly, allowing to proxy requests...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the EndpointRequest.to function that creates a matcher for null/ if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Note: This is only exploitable if all o...

Meon KYC 安全漏洞

Meon KYC is a solution from Meon India. Meon KYC has a security vulnerability that stems from certain API endpoints transmitting sensitive data in clear text in response to a load, which could lead to information disclosure...

KubeSphere 3.4.0 Insecure Direct Object Reference

KubeSphere version 3.4.0 and KubeSphere Enterprise version 4.1.1 suffer from an insecure direct object reference vulnerability. Exploit Title: IDOR Vulnerability in KubeSphere v3.4.0 & KubeSphere Enterprise v4.1.1 Date: 3 September Exploit Author: Okan Kurtulus Vendor Homepage:...

SuperAGI 安全漏洞

SuperAGI is an open source infrastructure application from SuperAGI Open Source. for building components, tools, frameworks, and models to implement open source AGI. A security vulnerability exists in SuperAGI version 0.0.14, which stems from an API endpoint returning user passwords in plaintext,...

CVE-2025-29925 XWiki allows unregistered users to access private pages information through REST endpoint

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints /rest/wikis/wikiName/pages even if the user doesn't have view rights on them. It's particularly true if the entire wiki is protected with "Prevent...

CVE-2025-30141

An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all...

PT-2025-4758 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: iceCMS version 2.2.0 Description: An access control issue in the component "/api/squareComment/DelectSquareById" allows unauthenticated attackers to access sensitive information. Recommendations: For iceCMS version 2.2.0, consider disabling...

UBUNTU-CVE-2024-43416

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application endpoint to check if an email address corresponds to a valid GLPI user. Version 10.0.17 fixes the issue...

WordPress plugin Masteriyo LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-23497 · Pure Storage · Pure Storage Flasharray

Name of the Vulnerable Software and Affected Versions: PureStorage FlashArray versions up to 6.6.5 Description: A flaw exists in PureStorage FlashArray, allowing a user to make a specific call to a FlashArray endpoint which enables privilege escalation. This issue can lead to improper privilege...

CVE-2024-6845

The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key...

GHSA-Q98F-2X4P-PRJR Exposure of debug and metrics endpoints in Pomerium

Impact In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak potentially sensitive environmental information or lead to limited denial of service conditions. Patches v0.17.1 Workarounds Block access to...

PT-2024-5821

Name of the Vulnerable Software and Affected Versions FastAdmin versions prior to 1.3.4.20220530 Description A problematic issue exists in FastAdmin related to improper path restriction within the /index/ajax/lang component. This allows for path traversal, potentially enabling remote attackers to...

PT-2024-28266 · Wavlink · Wavlink Wn551K1

Name of the Vulnerable Software and Affected Versions: WAVLINK WN551K1 version not specified Description: The issue allows attackers to obtain sensitive router information through the 'live mfg.shtml' endpoint. Recommendations: For WAVLINK WN551K1, restrict access to the 'live mfg.shtml' endpoint...

CVE-2024-1873

parisneo/lollms-webui is vulnerable to path traversal and denial of service attacks due to an exposed /selectdatabase endpoint in version a9d16b0. The endpoint improperly handles file paths, allowing attackers to specify absolute paths when interacting with the DiscussionsDB instance. This flaw...

PT-2024-18381 · Parisneo · Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui version a9d16b0 Description: The issue is related to an exposed /select database endpoint that improperly handles file paths, allowing attackers to specify absolute paths when interacting with the DiscussionsDB instance...

PT-2024-36531

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.40.0.4 Description The issue is caused by an arbitrary system path lookup feature, allowing any remote user to view full paths in the entire file system where h2o-3 is hosted. Specifically, the problem resides in the...

Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...

PT-2024-20987 · Ruvaroa · Ruvaroa

Name of the Vulnerable Software and Affected Versions: RuvarOA versions 6.01 through 12.01 Description: A SQL injection issue was discovered via the project id parameter at the "/ProjectManage/pm gatt inc.aspx" API endpoint. This allows for potential exploitation. No information is provided about...