109 matches found
CVE-2026-3269
A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...
PT-2026-22236
Name of the Vulnerable Software and Affected Versions psi-probe PSI Probe versions up to 5.3.0 Description A flaw exists in the Session Handler component of psi-probe PSI Probe. Specifically, the handleRequestInternal function within the file...
The vulnerability of the Session Handler component of the platform for creating and deploying work processes using artificial intelligence agents, related to the lack of authentication for a critical function, allows a perpetrator to trigger a service failure.
The vulnerability of the Session Handler component of the platform for creating and deploying work processes using AI agents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to cause service failures...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the startSessionHandler function. An attacker can cause excessive memory consumption and crash the server by sending unauthenticated HTTP requests with a specially crafted nonce a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the startSessionHandler function. An attacker can cause excessive memory consumption and crash the server by sending unauthenticated HTTP requests with a specially crafted nonce a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the startSessionHandler function. An attacker can cause excessive memory consumption and crash the server by sending unauthenticated HTTP requests with a specially crafted nonce a...
GHSA-HJR9-WJ7V-7HV8 Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass
Summary A specially crafted nonce routes unauthenticated requests through the NoEncoder path, where startSessionHandler reads the entire request body without limits, allowing attacker-driven memory exhaustion and process crash. Details - server/encoders/encoders.go: EncoderFromNonce returns...
PT-2026-1033
Name of the Vulnerable Software and Affected Versions Open5GS versions through 2.7.6 Description A flaw exists in Open5GS related to the sgwc s11 handle create session request function within the GTPv2-C F-TEID Handler component, specifically in the file src/sgwc/s11-handler.c. Manipulation of th...
EUVD-2015-0770
Malware in sbrugna...
EUVD-2025-20194
Malicious code in bioql PyPI...
EUVD-2022-7528
Malicious code in bioql PyPI...
EUVD-2024-32933
Malicious code in bioql PyPI...
EUVD-2025-20195
Malicious code in bioql PyPI...
EUVD-2023-24221
Malicious code in bioql PyPI...
EUVD-2024-1456
Malicious code in bioql PyPI...
CVE-2025-7115
A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/fileId/route.ts of the component Session Handler. The manipulation of the argument...
CVE-2025-7115
A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/fileId/route.ts of the component Session Handler. The manipulation of the argument...
CVE-2025-7114
A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulnerability is the function POST of the file apps/sim/app/api/files/upload/route.ts of the component Session Handler. The manipulation of the argument...
CVE-2025-7115
The CVE-2025-7115 entry concerns rowboatlabs rowboat, specifically the Session Handler component. The vulnerable element is the function PUT in file apps/rowboat/app/api/uploads/[fileId]/route.ts, where manipulation of the params argument leads to missing authentication, enabling remote exploitat...
CVE-2025-7114 SimStudioAI sim Session route.ts POST missing authentication
A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulnerability is the function POST of the file apps/sim/app/api/files/upload/route.ts of the component Session Handler. The manipulation of the argument...