Insufficiently Protected Credentials

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the baseurl parameter in the llm.chat, ai.model, llm.agent, and vector.connector processes. ...

EUVD-2022-36024

Malicious code in bioql PyPI...

CVE-2023-28356

CVE-2023-28356 — Rocket.Chat is affected. A maliciously crafted message containing a specific chain of characters can cause a chat process to enter a hot loop, consuming approximately 120% CPU and rendering the service unresponsive. Public details indicate Rocket.Chat as the vulnerable software, ...

CVE-2022-32958

A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process...

CVE-2022-32958

CVE-2022-32958 affects Teamplus Pro's chat functionality. A remote attacker with general user privileges can send a message to a Teamplus Pro chat group that exceeds the message size limit, with the result being termination of other recipients’ chat processes. The available connected sources desc...

PT-2022-21606 · Unknown · Teamplus Pro

Name of the Vulnerable Software and Affected Versions: Teamplus Pro affected versions not specified Description: A remote attacker with general user privilege can send a message to Teamplus Pro's chat group that exceeds the message size limit, which can terminate other recipients' Teamplus Pro ch...