45 matches found
plecost
Plecost ماسح أمان ووردبريس احترافي غير متزامن أولاً، صديق للمكتبات، لا يتطلب واجهة برمجة تطبيقات خارجية. جدول المحتويات ما هو Plecost؟ Plecost مقابل WPScan بداية سريعة التثبيت قاعدة بيانات CVE محرك اكتشاف CVE المسح وحدات الكشف أمان WooCommerce أمان WP eCommerce صيغ المخرجات استخدام المكتبة متغيرا...
EUVD-2026-94757
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...
PT-2026-107825
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...
EUVD-2025-210645
The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...
cortex-plugin-hexstrike
Example Plugin Brief one-line description of what this plugin...
MAL-2026-5521 Malicious code in @helpcentre/tesco-help (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb75510e87a08a5152331461c2b2b955ad21d418c8d2055f5f66ec15e22cf042 On npm install, the postinstall hook runs node index.js, which performs an HTTPS POST to https://f1ackavab3.execute-api.eu-west-2.amazonaws.com/...
CVE-2026-45023 AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/blockid/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in th...
CVE-2026-45023 AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/blockid/execute endpoint executes blocks without consuming any credits, regardless of the user's balance. The credit check that exists in th...
The vulnerability of the N8n automation platform, related to deficiencies in the authentication process, allows a malicious actor to reuse the external API key and gain unauthorized access to protected information.
The vulnerability of the N8n automation platform lies in the deficiencies of the authentication process when processing the dynamic-node-parameters endpoint. Exploiting this vulnerability allows an attacker to re-use the external API key and gain unauthorized access to protected information...
BIT-GITLAB-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...
CVE-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...
CVE-2025-10569: Allocation of Resources Without Limits or Throttling
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...
PT-2026-1692
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.3 through 18.5.4 GitLab CE/EE versions 18.6 through 18.6.2 GitLab CE/EE versions 18.7 through 18.7.0 Description An authenticated user could create a denial of service condition by providing crafted responses to externa...
EUVD-2021-27007
Malware in sbrugna...
EUVD-2024-3275
Malicious code in bioql PyPI...
EUVD-2025-23154
Malicious code in bioql PyPI...
Malicious code in external-api (npm)
The package external-api was found to contain malicious code...
MAL-2025-20105 Malicious code in external-api (npm)
The package external-api was found to contain malicious code...
CVE-2025-53944
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents. In v0.6.15 and below, the external API's getgraphexecutionresults endpoint has an authorization bypass vulnerability. While it correctly validates user access to the graphid, it fails ...
CVE-2025-53944
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents. In v0.6.15 and below, the external API's getgraphexecutionresults endpoint has an authorization bypass vulnerability. While it correctly validates user access to the graphid, it fails ...