93 matches found
EUVD-2023-1608
Malicious code in bioql PyPI...
EUVD-2022-2189
Malicious code in bioql PyPI...
EUVD-2025-25431
Malicious code in bioql PyPI...
GO-2025-3906 Mattermost Server SSRF Vulnerability via the Agents Plugin in github.com/mattermost/mattermost-server
Mattermost Server SSRF Vulnerability via the Agents Plugin in github.com/mattermost/mattermost-server...
CVE-2025-47700
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
GHSA-VQWH-5JHH-VC9P Mattermost Server SSRF Vulnerability via the Agents Plugin
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
Mattermost Server SSRF Vulnerability via the Agents Plugin
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
CVE-2025-47700
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
CVE-2025-47700
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
CVE-2025-47700
Mattermost Server versions 10.5.x
CVE-2025-47700 AI plugin APIs can be triggered using post actions
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
CVE-2025-47700 AI plugin APIs can be triggered using post actions
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
CVE-2025-47700 AI plugin APIs can be triggered using post actions
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
CVE-2025-47700: Server-Side Request Forgery (SSRF)
Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...
Mattermost Server security vulnerabilities
Mattermost Server is a suite of open source messaging platforms from US-based Mattermost. A security vulnerability exists in Mattermost Server version 10.5.9 and prior versions, which stems from the Agents plugin not rejecting empty request bodies, which could cause users to click on malicious...
PT-2025-34196 · Mattermost · Mattermost Server +1
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions 10.5.0 through 10.5.9 Description: Mattermost Server versions 10.5.x up to and including 10.5.9, when utilizing the Agents plugin, do not reject empty request bodies. This allows users to potentially trick others in...
CVE-2023-32990
A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method...
CVE-2023-32988
A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2022-30951
Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in...