PT-2026-33733

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse openai plugin json to tool bundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery...

Filament multi-factor authentication (app) recovery codes can be used multiple times

Summary A flaw in the handling of recovery codes for app-based multi-factor authentication allows the same recovery code to be reused indefinitely. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled. Impact If an attacker gains access to both the user...

PT-2024-29027 · Linksys · Linksys Velop Pro 6E

Name of the Vulnerable Software and Affected Versions: Linksys Velop Pro 6E version 1.0.8 Linksys Velop Pro 6E version 1.0.10.215314 Description: The issue concerns Linksys Velop Pro 6E devices sending cleartext Wi-Fi passwords over the public Internet during app-based installation...

Microsoft Warns on OAuth Attacks Against Cloud App Users

Against the backdrop of widespread remote working and the increased use of collaboration apps, attackers are ramping up application-based attacks that exploit OAuth 2.0, Microsoft is warning. OAuth is an open standard for access delegation, commonly used as a way for people to sign into services...

Protecting your remote workforce from application-based attacks like consent phishing

The global pandemic has dramatically shifted how people work. As a result, organizations around the world have scaled up cloud services to support collaboration and productivity from home. We’re also seeing more apps leverage Microsoft’s identity platform to ensure seamless access and integrated...

Managing Printer Deployment Using Layers in the Unidesk Environment

While many brokering and persona management solutions provide mechanisms to manage printer deployment, you might find it easier to use Unidesk layers. Unidesk layers provide a flexible mechanism for managing printer deployments for different groups of users. When you use Unidesk layers to deploy...

Malicious URLs Pose Mobile Hijacking Risk

The security of mobile devices may be at risk for Web borne attacks because of loose policies for processing URLs Uniform Resource Locators, according to a report by security researcher Nitesh Dhajani. Writing on the SANS Application Security Blog, Dhanjani said that that way the iPhone’s operati...