12 matches found
CVE-2026-57494
AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=...
CVE-2026-44177
CVE-2026-44177 affects Kirby CMS (Kirby 5.3.0 up to
GHSA-HJWC-26PJ-V3PM AgenticMail: Cross-agent task authorization bypass in AgenticMail API
Summary A low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to GET /api/agenticmail/tasks/pending?assignee=. The returned task objects include the task IDs and payloads. The same task IDs can then be used with the...
Arbitrary File Upload
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Arbitrary File Upload via the blueprint-upload process. An attacker can gain full administrative access by uploading a crafted YAML file to th...
EUVD-2022-48556
Malicious code in bioql PyPI...
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
Directory traversal
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
CVE-2022-45697: Improper Link Resolution Before File Access
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
