Purocean Yank Note: Path traversal vulnerability

Purocean Yank Note versions prior to 3.93.1 have a path traversal vulnerability. This vulnerability stems from issues with the path or doc parameters in the/api/help endpoint. Attackers can exploit this by providing repeated “../” segments, thereby bypassing single replacement cleanup. As a resul...

WSO2 API Control Plane session mechanism vulnerability

WSO2 API Control Plane versions prior to 4.5.0 and 4.6.0 and 4.6.0 and 4.6.0.13 contained a session mechanism vulnerability. This vulnerability stemmed from the use of the session binding token feature and token binding verification, but without enabling the “Revoke tokens upon user logout” optio...

MLJAR mercury input validation error vulnerability

The MLJAR Mercury version 3.0.0 to 3.2.4 had a security vulnerability. This vulnerability stemmed from the lack of a comma in BLOCKEDPATTERNS, allowing the concatenation of /lab and/api/terminals regular expression literals. As a result, API/terminals requests bypassed the anonymous endpoint...

Apache Answer log information disclosure vulnerability

Apache Answer versions 2.0.2 and earlier contain a vulnerability related to log information leakage. This vulnerability arises from writing sensitive information to log files; each authentication request writes the full API key into the application logs. As a result, individuals with log reading...

.NET Platform AdventureWorks Authorization Issue Vulnerability

The .NET Platform AdventureWorks has an authorization issue vulnerability. This vulnerability stems from an improper authentication mechanism in the AddApplicationServices function within the Catalog API component’s file src/Catalog.API/Extensions/Extensions.cs. This could allow remote attackers ...

WSO2 API Manager Cross-Site Scripting Vulnerability

WSO2 API Manager versions prior to 3.2.0.4, 3.2.1.3 to 3.2.1.53, 4.1.0.214 to 4.1.0.215, 4.2.0.153 to 4.2.0.153, 4.3.0.66 to 4.3.0.66, 4.4.0.29 to 4.4.0.29, and 4.5.0.11 to 4.5.0.11; WSO2 Universal Gateway versions prior to 4.5.0.11; WSO2 Traffic Manager versions prior to 4.5.0.11; WSO2 API Contr...

WSO2 API Manager authorization issue vulnerability

WSO2 API Manager versions prior to 3.2.0.4.34, 3.2.1.54, 4.1.0.218, 4.2.0.156, 4.3.0.67, 4.4.0.30, and 4.5.0.14; WSO2 Universal Gateway versions prior to 4.5.0.14; WSO2 API Control Plane versions prior to 4.5.0.15; and Forgerock Key Manager Component versions prior to 1.0.0.4, 1.1.0.2, and 1.1.5....

Apache Answer authorization issue vulnerability

Versions 2.0.2 and earlier of Apache Answer contain an authorization issue vulnerability. This vulnerability stems from the reaction API’s lack of content visibility controls, which may allow unauthorized users to read restricted content in reaction metadata or to add and delete their own reactio...

UncleCode Crawl4AI Server Request Forgery Vulnerability

The UncleCode Crawl4AI version from 0.8.7 to 0.9.5 has a server-side request forgeing vulnerability. This vulnerability stems from the Docker API server’s server-side request forgeing flaw. Unauthenticated attackers can bypass target checks by exploiting differences in URL user information parsin...

CognicellAI Cognition configuration error vulnerability

CognicellAI Cognition versions prior to 0.13.0 have a security vulnerability. This vulnerability stems from the default setting of having the agent sandbox backend executed locally, and the REST/SSE API not enabling authentication. Attackers can create sessions using the POST /sessions endpoint...

WSO2 Universal Gateway encryption vulnerabilities

WSO2 Universal Gateway versions from 4.5.0 through 4.5.0.46 and from 4.6.0 through 4.6.0.14, WSO2 Traffic Manager versions from 4.5.0 through 4.5.0.45 and from 4.6.0 through 4.6.0.14, WSO2 API Control Plane versions from 4.5.0 through 4.5.0.47 and from 4.6.0 through 4.6.0.15, WSO2 API Manager...

MLFlow path traversal vulnerability

MLflow versions 3.17.1 and earlier have a path traversal vulnerability. This vulnerability stems from improper handling of trace IDs by the FileStore tracking backend. Unauthenticated attackers can submit a specially crafted trace ID containing a traversal sequence to the POST...

Fenrir Sleipnir Mobile for Android: Processing logic error vulnerability

Fenrir Sleipnir Mobile for Android versions prior to 3.9.0 has a processing logic vulnerability. This vulnerability stems from an UI deception issue. A remote attacker can enter full-screen mode through the Fullscreen API without displaying any persistent notifications or indications of trusted...

Tencent ncnn digital error vulnerability

Tencent ncnn has a numerical error vulnerability. This vulnerability stems from an improper handling of the function ncnn::yuv420sp2rgb in the Conversion API component’s file src/matpixel.cpp. This improper handling leads to integer overflow, which could be exploited by remote attackers to carry...

H3C Magic NX15: Path traversal vulnerability

H3C Magic NX15 V100R017 version has a path traversal vulnerability. This vulnerability stems from improper handling of the importprofile function’s parameter fileName in files/api/upload, which may lead to path traversal attacks. Attackers can launch attacks remotely...

MLJAR Mercury authorization issue vulnerability

The MLJAR mercury version prior to 3.2.6 has an authorization issue vulnerability. This vulnerability stems from the default lack of token deployment, allowing anonymous clients to create Jupyter kernels and send executerequest messages containing arbitrary Python code. Additionally, the endpoint...

Flarum Authorization Vulnerability

Versions of Flarum 2.0.0-beta.1 to 2.0.0-beta.8 have a permission-related vulnerability. This vulnerability stems from the lack of authentication and administrator checks on the TaskResource index endpoint. A remote attacker can send a GET request to /api/extension-manager-tasks to read task...

Operacle CheckCle Authorization Issue Vulnerability

Operacle CheckCle 1.6.0 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authorization checks. The PocketBase collection uses empty API rules. Attackers can query the /api/collections//records endpoint without authentication. They can read,...

@appweaver/core (>=1.6.2, <=1.12.2), @eik/service (>=5.1.66, <=5.6.10) +2 more potentially affected by CVE-2026-110024 via @fastify/jwt (>=10.2.1, <=10.2.3)

@fastify/jwt NPM version =10.2.1, =1.6.2, =5.1.66, =0.1.0, =0.2.1, =0.2.2 Source cves: CVE-2026-110024 Source advisory: MEND:CVE-2026-110024...

CVE-2026-112014

LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover...