Lucene search
+L

45 matches found

Kitploit
Kitploit
•added 2026/10/10 5:56 a.m.•24 views

plecost

Plecost ماسح أمان ووردبريس احترافي غير متزامن أولاً، صديق للمكتبات، لا يتطلب واجهة برمجة تطبيقات خارجية. جدول المحتويات ما هو Plecost؟ Plecost مقابل WPScan بداية سريعة التثبيت قاعدة بيانات CVE محرك اكتشاف CVE المسح وحدات الكشف أمان WooCommerce أمان WP eCommerce صيغ المخرجات استخدام المكتبة متغيرا...

6.3AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 5:23 a.m.•12 views

EUVD-2026-94757

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

6.1CVSS5.9AI score0.00186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•6 views

PT-2026-107825

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

6.1CVSS5.9AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 12:31 a.m.•27 views

EUVD-2025-210645

The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...

4.3CVSS5.8AI score0.00279EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/06/19 6:58 p.m.•137 views

cortex-plugin-hexstrike

Example Plugin Brief one-line description of what this plugin...

5.9AI score
SaveExploits0
OSV
OSV
•added 2026/06/10 6:23 p.m.•36 views

MAL-2026-5521 Malicious code in @helpcentre/tesco-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb75510e87a08a5152331461c2b2b955ad21d418c8d2055f5f66ec15e22cf042 On npm install, the postinstall hook runs node index.js, which performs an HTTPS POST to https://f1ackavab3.execute-api.eu-west-2.amazonaws.com/...

5.8AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/28 9:30 p.m.•18 views

CVE-2026-45023 AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/blockid/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in th...

5.4CVSS6.1AI score0.00376EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/28 9:30 p.m.•58 views

CVE-2026-45023 AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/blockid/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in th...

5.4CVSS0.00376EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•20 views

The vulnerability of the N8n automation platform, related to deficiencies in the authentication process, allows a malicious actor to reuse the external API key and gain unauthorized access to protected information.

The vulnerability of the N8n automation platform lies in the deficiencies of the authentication process when processing the dynamic-node-parameters endpoint. Exploiting this vulnerability allows an attacker to re-use the external API key and gain unauthorized access to protected information...

7.8CVSS5.8AI score0.00424EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/01/13 9:06 a.m.•18 views

BIT-GITLAB-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...

6.5CVSS6.5AI score0.00521EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/09 10:04 a.m.•9 views

CVE-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...

6.5CVSS6.5AI score0.00521EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•5 views

CVE-2025-10569: Allocation of Resources Without Limits or Throttling

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...

6.5CVSS6.5AI score0.00521EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•18 views

PT-2026-1692

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.3 through 18.5.4 GitLab CE/EE versions 18.6 through 18.6.2 GitLab CE/EE versions 18.7 through 18.7.0 Description An authenticated user could create a denial of service condition by providing crafted responses to externa...

6.8CVSS6.4AI score0.00521EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-27007

Malware in sbrugna...

9.8CVSS8.1AI score0.01031EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-3275

Malicious code in bioql PyPI...

5.3CVSS6.2AI score0.00327EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-23154

Malicious code in bioql PyPI...

7.7CVSS6.6AI score0.00463EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•16 views

Malicious code in external-api (npm)

The package external-api was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•14 views

MAL-2025-20105 Malicious code in external-api (npm)

The package external-api was found to contain malicious code...

7.2AI score
SaveExploits0
NVD
NVD
•added 2025/07/30 3:15 p.m.•40 views

CVE-2025-53944

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents. In v0.6.15 and below, the external API's getgraphexecutionresults endpoint has an authorization bypass vulnerability. While it correctly validates user access to the graphid, it fails ...

7.7CVSS0.00463EPSS
SaveExploits1References3
Mend
Mend
•added 2025/07/30 2:28 p.m.•1 views

CVE-2025-53944

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents. In v0.6.15 and below, the external API's getgraphexecutionresults endpoint has an authorization bypass vulnerability. While it correctly validates user access to the graphid, it fails ...

8.3CVSS0.00463EPSS
SaveExploits1References5
Rows per page
Query Builder