187 matches found
Exploit for CVE-2025-59287
wsus-decoy Defensive proof of concept decoy for CVE-2025-5928...
EUVD-2025-30372
Malicious code in bioql PyPI...
EUVD-2022-5385
Malicious code in bioql PyPI...
EUVD-2025-30371
Malicious code in bioql PyPI...
CVE-2025-10760
A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookuprepo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be...
CVE-2025-10761
A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the component Login Endpoint. The manipulation leads to improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack is considered ...
CVE-2025-10761
A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the component Login Endpoint. The manipulation leads to improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack is considered ...
CVE-2025-10760
A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookuprepo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be...
CVE-2025-10761 Harness Login Endpoint login excessive authentication
A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the component Login Endpoint. The manipulation leads to improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack is considered ...
CVE-2025-10761
CVE-2025-10761 affects Harness 3.3.0, specifically the /api/v1/login endpoint in the Login Endpoint component. The issue is an improper restriction of excessive authentication attempts, enabling remote exploitation with high complexity and a low overall CVSS base, but a non-trivial attack path is...
CVE-2025-10761 Harness Login Endpoint login excessive authentication
A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the component Login Endpoint. The manipulation leads to improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack is considered ...
CVE-2025-10760 Harness lookup_repo.go LookupRepo server-side request forgery
A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookuprepo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be...
CVE-2025-10760
Harness 3.3.0 is affected by a flaw in the LookupRepo function (app/api/controller/gitspace/lookup_repo.go) where manipulating the url argument can trigger server-side request forgery. The vulnerability is exploitable remotely, and published PoCs exist; vendor did not respond to disclosure per mu...
CVE-2025-10760 Harness lookup_repo.go LookupRepo server-side request forgery
A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/lookuprepo.go. Executing manipulation of the argument url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been published and may be...
Harness 安全漏洞
Harness is a development platform from Harness Open Source. A security vulnerability exists in Harness version 3.3.0, which stems from an improper limit on the number of authentication attempts in the /api/v1/login file, which could lead to a brute force attack...
Harness 代码问题漏洞
Harness is a development platform open-sourced by Harness. A code issue vulnerability exists in Harness version 3.3.0, which stems from the incorrect manipulation of the parameter url by the LookupRepo function in the file app/api/controller/gitspace/lookuprepo.go, which could lead to server-side...
PT-2025-38655
Name of the Vulnerable Software and Affected Versions Harness version 3.3.0 Description A flaw exists in Harness that impacts the LookupRepo function within the app/api/controller/gitspace/lookup repo.go file. Manipulation of the url argument can lead to server-side request forgery, potentially...
PT-2025-38656
Name of the Vulnerable Software and Affected Versions Harness version 3.3.0 Description A vulnerability exists in Harness version 3.3.0 related to improper restriction of excessive authentication attempts. The issue affects an unknown function within the /api/v1/login endpoint of the Login Endpoi...
SUSE CVE-2025-58158
Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...
