MantisBT is vulnerable to authentication bypass through the SOAP API on MySQL

Mantis Bug Tracker instances running on MySQL and compatible databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of improper type checking on the password parameter. Other database backends are not affected, as they do not perform implicit type conversion...

Allocation of Resources Without Limits or Throttling

Overview bugsink is a Self-hosted Error Tracking Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the Brotli Decompression process. An attacker can cause excessive CPU consumption by submitting a specially crafted Brotli-compressed...

PT-2023-27609 · Veilid · Veilid

Name of the Vulnerable Software and Affected Versions: Veilid versions prior to 0.1.9 Description: The issue allows remote attackers to cause a denial of service out-of-memory abort via crafted packet data. This is due to the lack of size checking for uncompressed data during decompression upon a...