Missing Authentication for Critical Function

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the public-chatbotConfig and oauth2-credential/refresh endpoints. An attacker can obtain OAuth 2.0 access tokens for third-party services by retrieving...

PT-2023-10296 · Cchetanonline · Wp-Copyprotect

Name of the Vulnerable Software and Affected Versions: cchetanonline WP-CopyProtect versions up to 3.0.0 Description: A vulnerability was found in the function CopyProtect options page of the file wp-copyprotect.php. The manipulation of the argument CopyProtect nrc text leads to cross-site...

PT-2022-20195 · Litespeed · Litespeed Quic

Name of the Vulnerable Software and Affected Versions: LiteSpeed QUIC aka LSQUIC versions prior to 3.1.0 Description: The issue arises from the mishandling of MAX TABLE CAPACITY in liblsquic/lsquic qenc hdl.c. No information is provided about the estimated number of potentially affected devices...