Lucene search
+L

5237 matches found

Cvelist
Cvelist
added 2026/08/04 8:35 p.m.40 views

CVE-2026-70488 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS0.00213EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/04 8:35 p.m.74 views

CVE-2026-70488

CVE-2026-70488 – Open WebUI : In Open WebUI builds from 0.9.6 to 0.11.0, the sync cleanup endpoint (POST /api/v1/knowledge/{id}/sync/cleanup) did not properly constrain actions to the target knowledge base. The handler authenticated write access via the URL knowledge base, then acted on directory...

4.3CVSS5.5AI score0.00213EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/04 8:35 p.m.24 views

CVE-2026-70488 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objec...

4.3CVSS5.4AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/04 7:25 a.m.55 views

CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

8.5CVSS0.00116EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/04 7:25 a.m.59 views

CVE-2026-18759

CVE-2026-18759 affects ASUSTOR Backup Plan (ABP) and ASUSTOR EZ Sync (AES): a file-based IPC protected by AES can be abused by a local authenticated user to recover the IPC key (readable by standard users, DPAPI-protected) and forge IPC requests. Combined with an insufficient substring check for ...

8.5CVSS5.6AI score0.00116EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/08/04 3:55 a.m.15 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the StatementSyncIterator. An attacker can execute unintended SQL statements with altered parameters by leveraging a stale iterator after the underlying statement has been reset and...

6CVSS6.5AI score0.00253EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/04 12:49 a.m.10 views

CVE-2026-58041

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

5.3CVSS6.2AI score0.00253EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/04 12:49 a.m.18 views

EUVD-2026-52561

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

5.3CVSS6.2AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/03 9:16 p.m.13 views

CVE-2026-48063

Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message key and payload. This allows anyone to...

9.3CVSS0.00157EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 8:55 p.m.31 views

CVE-2026-48063 Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message key and payload. This allows anyone to...

9.3CVSS5.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/03 8:55 p.m.49 views

CVE-2026-48063 Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a malicious payload via the placeholderResendMessage and trigger a fake messages.upsert event with a fake message key and payload. This allows anyone to...

9.3CVSS0.00157EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/03 2:54 a.m.10 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for...

7.8CVSS7AI score0.00154EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/01 12:22 p.m.50 views

CVE-2026-67307 Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync

Wazuh 5.0.0-beta1 fixed in 5.0.0-beta3 does not validate or override the clustername and clusternode fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileged enrolled agent to spoof cluster...

7CVSS0.00194EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/01 12:22 p.m.80 views

CVE-2026-67307

Wazuh 5.0.0-beta1 is affected by a vulnerability in inventory-sync Start FlatBuffer messages where cluster_name and cluster_node are not validated or overridden, while agentid is validated. This enables a low-privileged enrolled agent to spoof cluster attribution in indexed inventory and vulnerab...

7.7CVSS5.5AI score0.00194EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/08/01 12:22 p.m.9 views

CVE-2026-67307 Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync

Wazuh 5.0.0-beta1 fixed in 5.0.0-beta3 does not validate or override the clustername and clusternode fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileged enrolled agent to spoof cluster...

7CVSS5.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/01 6:28 a.m.7 views

bramble v1.13.0-chromium

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

5.7AI score
SaveExploits0References7
OSV
OSV
added 2026/08/01 3:43 a.m.14 views

MAL-2026-11494 Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/01 3:43 a.m.14 views

Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

5.6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/30 11:12 p.m.11 views

CVE-2026-17918

An use after free flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513127137...

8.8CVSS5.8AI score0.00303EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/30 5:03 p.m.14 views

SUSE CVE-2026-17918

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

8.8CVSS6.1AI score0.00303EPSS
SaveExploits0References3
Rows per page
Query Builder