29 matches found
CVE-2026-110909
Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console al...
EUVD-2026-88296
A vulnerability was discovered in Fleet's Git webhook receiver the gitjob webhook service. When a webhook secret is not configured, incoming webhook requests are accepted without verification, and processing a request can change the spec.pollingInterval field of a matching GitRepo resource in any...
CVE-2026-56744
@bsv/wallet-toolbox provides BRC-100 wallet signing and storage components, while @bsv/wallet-toolbox-client and @bsv/wallet-toolbox-mobile provide client-focused distributions for standard and mobile applications using wallet storage services. A vulnerability in these packages causes transaction...
PT-2026-105772
download wheel runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLE SHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or th...
EUVD-2014-7437
Malware in sbrugna...
CVE-2023-43275
Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...
CVE-2022-45802
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later...
Code injection
Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...
CVE-2022-43762 Memory leak when receiving messages in APROL Tbase server
Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...
Arbitrary File Upload
express-fileupload is vulnerable to arbitrary file upload. The vulnerability exists due to a lack of verification of the number of files being sent to the writeStream function...
Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2022-22736)
Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable due to a lack of verification of the existence of an object before performing operations on it, which can be exploited to execute code in the context of the current process...
Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2022-22730)
Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader, which stems from the lack of verification of the existence of an object before performing operations on it, and can be exploited by attackers to execute code in the context of the current proces...
CVE-2021-43273
An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...
CVE-2020-19767
A lack of target address verification in the destroycontract function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script...
CVE-2020-19769: Insufficient Verification of Data Authenticity
A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...
Open Redirection
github.com/pomerium/pomerium is vulnerable to open redirect. Lack of verification of pomeriumsignature affects routes responsible for sign in/out. However, it does not introduce an authentication bypass...
CVE-2021-29133: Undefined Security Weakness
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
Integer overflow
HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160C00E160R2P8 has an integer overflow vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause integer...
Design/Logic Flaw
HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160C00E160R2P8 have an out of bound read vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause...