16 matches found
CVE-2026-116284
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be performed from remote. The vendor was contacted early about th...
CVE-2026-116283
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. Upgrading to version 5.2.0 is able to mitigate this issue...
CVE-2026-116280
A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the file client-engine-application/f.cs of the component Proxy Validation. Executing a manipulation of the argument host/port can lead to server-side request forgery. The attack may ...
CVE-2026-116281
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local...
CVE-2026-116282
A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.ListCookies of the file client-engine-application/w.cs of the component Cookie Controller. The manipulation of the argument guid results in information disclosure. The attack can be...
EUVD-2026-109931
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be performed from remote. The vendor was contacted early about th...
CVE-2026-116284
A security vulnerability exists in Kameleo up to version 5.3.1 within the Local API component. Specifically, the vulnerability affects unknown code in the file /general/user-info , where manipulation can result in information disclosure . The attack can be performed remotely . No specific remedia...
EUVD-2026-109832
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. Upgrading to version 5.2.0 is able to mitigate this issue...
CVE-2026-116283
A weakness in Kameleo up to version 5.0.1.26 allows for information disclosure via an unknown part of the /profiles file within the Local API component. This vulnerability can be exploited remotely . To mitigate this issue, it is recommended to upgrade the affected component to version 5.2.0 . No...
CVE-2026-116282 Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure
A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.ListCookies of the file client-engine-application/w.cs of the component Cookie Controller. The manipulation of the argument guid results in information disclosure. The attack can be...
EUVD-2026-109817
A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.ListCookies of the file client-engine-application/w.cs of the component Cookie Controller. The manipulation of the argument guid results in information disclosure. The attack can be...
CVE-2026-116282
A security flaw exists in Kameleo up to version 5.3.1 within the Cookie Controller component. Specifically, the CookieController.ListCookies function in the file client-engine-application/w.cs is vulnerable to information disclosure when an attacker manipulates the guid argument. This attack can ...
EUVD-2026-109802
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local...
CVE-2026-116281
A vulnerability exists in Kameleo up to version 5.0.1.26 within the Profile Controller component. Specifically, the ListProfiles function in the file client-engine-application/t.cs is susceptible to manipulation, which can result in information disclosure . This attack is restricted to a local en...
CVE-2026-116280
A Server-Side Request Forgery (SSRF) vulnerability exists in Kameleo up to version 5.0.1.26 . The flaw is located in the Proxy Validation component, specifically within the InternalController.TestProxy function of the client-engine-application/f.cs file. An attacker can remotely launch an attack ...
EUVD-2026-109795
A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the file client-engine-application/f.cs of the component Proxy Validation. Executing a manipulation of the argument host/port can lead to server-side request forgery. The attack may ...