8 matches found
SafeVault
SafeVault — Secure Coding, Authentication & Vulnerability Reme...
CVE-2026-34162
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint /api/core/app/httpTools/runTool is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers,...
CVE-2026-34162: Missing Authentication for Critical Function
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint /api/core/app/httpTools/runTool is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers,...
Malicious code in @moonpig/web-core-app (npm)
The package @moonpig/web-core-app was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates. Note: Windows systems are not vulnerable to this issue. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...
PT-2018-9949
Name of the Vulnerable Software and Affected Versions: EE 4GEE HH70VB-2BE8GB3 HH70 E1 02.00 19 Description: An issue was discovered where hardcoded root SSH credentials are stored within the core app binary, which is used by the EE router for networking services. The default password is oelinux12...
