Lucene search
K

48 matches found

Cvelist
Cvelist
added 2026/04/28 12:15 p.m.31 views

CVE-2026-7271 DV0x creative-ad-agent creative-ad-agent-server sdk-server.ts path traversal

A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3. Impacted is an unknown function of the file server/sdk-server.ts of the component creative-ad-agent-server. Performing a manipulation of the argument req.params results in path traversal. Remote...

6.9CVSS0.00479EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.8 views

PT-2026-35718

A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3. Impacted is an unknown function of the file server/sdk-server.ts of the component creative-ad-agent-server. Performing a manipulation of the argument req.params results in path traversal. Remote...

6.9CVSS5.3AI score0.00479EPSS
Exploits0References9
Redos
Redos
added 2026/03/20 12:0 a.m.5 views

ROS-20260320-73-0007

A vulnerability in the ssh-agent library ssh-agent server for the Go crypto programming language involves reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.3CVSS6.9AI score0.00473EPSS
Exploits0
EUVD
EUVD
added 2025/11/19 11:16 p.m.4 views

EUVD-2025-198227

golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read...

5.3CVSS6.3AI score0.00473EPSS
Exploits0References5
OSV
OSV
added 2025/11/19 9:15 p.m.3 views

CVE-2025-47914

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

5.3CVSS6.8AI score
Exploits0References4
OSV
OSV
added 2025/11/19 8:11 p.m.4 views

GO-2025-4135 Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

5.3CVSS6.8AI score0.00473EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2013-0184

Malware in sbrugna...

4.3CVSS6.1AI score0.01116EPSS
Exploits4References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-59232

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00286EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/09/25 2:5 p.m.3 views

CVE-2025-10540 Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...

6.7AI score0.00118EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-7045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this...

6.1CVSS5.5AI score0.00286EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2025/07/21 12:0 a.m.96 views

📄 Mouse Agent Server 3.1 Unauthenticated Remote System Control

Mouse Agent Server version 3.1 exposes a TCP control interface on port 8088 that allows remote execution of power commands shutdown, restart, sleep, logoff via unauthenticated commands. An attacker on the same network can exploit this to disrupt the system remotely without user interaction. Explo...

7.8AI score
Exploits0
Packet Storm
Packet Storm
added 2025/07/21 12:0 a.m.102 views

📄 Mouse Agent Server 3.1 Remote Code Execution

Mouse Agent Server version 3.1 is vulnerable to unauthenticated remote code execution by simulating mouse/keyboard inputs to force the target to execute a PowerShell reverse shell. It works against default configurations by sending GUI automation commands through port 8088. Exploit Title: Mouse...

8.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:50 a.m.8 views

CVE-2023-7045

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server KAS...

6.1CVSS6.6AI score0.00286EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:4 p.m.6 views

CVE-2022-34183

Jenkins Agent Server Parameter Plugin 1.1 and earlier does not escape the name and description of Agent Server parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.4AI score0.00602EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/06/19 12:0 a.m.5 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack through the Kubernetes Agent Server...

5.5CVSS5.4AI score0.00286EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/05/29 7:29 a.m.144 views

BIT-GITLAB-2023-7045 Cross-Site Request Forgery (CSRF) in GitLab

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server KAS...

6.1CVSS5.8AI score0.00286EPSS
Exploits1References3
NVD
NVD
added 2024/05/23 11:15 a.m.26 views

CVE-2023-7045

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server KAS...

6.1CVSS5.6AI score0.00286EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2024/05/23 11:15 a.m.20 views

CVE-2023-7045

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server KAS...

6.1CVSS5.8AI score0.00286EPSS
Exploits1References4
OSV
OSV
added 2024/05/23 11:15 a.m.7 views

UBUNTU-CVE-2023-7045

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server KAS...

6.1CVSS5.8AI score0.00286EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/05/23 11:2 a.m.20 views

CVE-2023-7045 Cross-Site Request Forgery (CSRF) in GitLab

A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server KAS...

5.4CVSS5.3AI score0.00286EPSS
Exploits1References2
Rows per page
Query Builder