25 matches found
CVE-2026-120113
IBM Aspera Connect versions 1.6.1 through 4.2.19 are vulnerable to multiple security issues (CVE-2026-120113) due to missing authentication and overly permissive cross-origin access controls within the local HTTP service. A remote attacker could trick a victim into visiting a malicious webpage to...
EUVD-2026-119680
IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and overly permissive cross-origin access controls in the local HTTP service. By persuading a victim to visit a malicious web pag...
PT-2026-140046
IBM Aspera Connect 1.6.1 through 4.2.19 could allow a remote attacker to obtain sensitive information and modify host trust configuration due to missing authentication and overly permissive cross-origin access controls in the local HTTP service. By persuading a victim to visit a malicious web pag...
CVE-2026-123787
A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...
CVE-2026-123787 nexmoe VidBee Local HTTP Service local-api.ts information disclosure
A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...
CVE-2026-123787 nexmoe VidBee Local HTTP Service local-api.ts information disclosure
A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...
CVE-2026-123787
A weakness in the Local HTTP Service component of nexmoe VidBee (versions up to 1.3.13/2.0.2) allows for information disclosure . The issue stems from an unknown function within the file apps/desktop/src/main/local-api.ts. An attacker can launch this attack remotely by executing a manipulation. P...
CVE-2026-123787 nexmoe VidBee Local HTTP Service local-api.ts information disclosure
A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...
EUVD-2026-118498
A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...
CVE-2026-116228
A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...
CVE-2026-116228 777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication
A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...
CVE-2026-116228 777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication
A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...
CVE-2026-116228
A vulnerability exists in 777genius agent-teams-ai (up to version 2.17.10) within the Local HTTP Service component. Specifically, the doStart function in the file src/main/services/infrastructure/HttpServer.ts lacks proper authentication. This flaw allows an attacker with local access to perform ...
EUVD-2026-109633
A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...
Ilya Agent Teams authorization issue vulnerability
Versions 2.17.10 and earlier of Ilya Agent Teams contain an authorization issue vulnerability. This vulnerability stems from a lack of authentication in the doStart function within the file src/main/services/infrastructure/HttpServer.ts in the Local HTTP Service component, potentially allowing...
PT-2026-123194
A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...
EUVD-2026-107681
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-114574
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-114574
A security vulnerability exists in massCodeIO massCode 5.10 within the Local HTTP Service component. Specifically, an unknown function in the file src/main/api/index.ts allows for information disclosure via remote manipulation. The documents indicate that an exploit has been disclosed publicly an...