CVE-2023-21839

CVE-2023-21839 분석 이 취약점은 t3 또는 iiop 프로토콜을 통해 객체를 바인딩한 후 lookup 또는 list 메서드를 호출할 때 바인딩된 객체의 getReferent 메서드가 트리거되기 때문에 발생합니다. t3 프로토콜의 호출 스택 getObjectInstance:96, WLNamingManager weblogic.jndi.internal resolveObject:377, ServerNamingNode weblogic.jndi.internal resolveObject:856, BasicNamingNode...

Spring4Shell-CTF

Spring4Shell CVE-2022-22965 - Mise en place de l'environnement de vulnérabilité et conception de défi CTF Présentation du projet Ce projet comprend une approche à deux voies pour la recherche en sécurité : 1. Mise en place de l'environnement Vulhub traditionnel : Utilisation de la base de données...

CVE-2026-34213

CVE-2026-34213 Un utilisateur Docmost à faibles privilèges pourrait fournir un attachmentId victime au point de terminaison de téléversement générique et écraser la pièce jointe stockée d'une autre page dans le même espace de travail. Introduction J'ai identifié, divulgué de manière responsable e...

CVE-2026-48765 TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential through handleUpdateOAuthCredentials by supplying an attacker-controlled writable...

CVE-2026-48765 TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential through handleUpdateOAuthCredentials by supplying an attacker-controlled writable...

CVE-2026-48765

CVE-2026-48765 affects TypeBot (a chatbot builder tool). Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential via handleUpdateOAuthCredentials using an attacker-controlled w...

CVE-2026-48765 TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential through handleUpdateOAuthCredentials by supplying an attacker-controlled writable...

Cross-site Request Forgery (CSRF)

Kimai is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to state-changing team creation and object-binding operations being exposed through GET routes without CSRF protection, which allows an attacker to trick an authenticated user into making unauthorized changes to team...

Kimai: Login CSRF in Default Team Creation Endpoints Allows Unauthorized Team and Permission Structure Changes

Summary Kimai 2.56.0 contains authenticated cross-site request forgery issues in its default team creation shortcuts for projects, customers, and activities. These endpoints are exposed through GET routes and directly create or reuse a Team, add the current user as teamlead, and bind the target...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the GET endpoints responsible for team creation and object binding. An attacker can cause unauthorized changes to team membership and permission structures by tricking a logged-in user with...

PT-2026-60079

Summary Kimai 2.56.0 contains authenticated cross-site request forgery issues in its default team creation shortcuts for projects, customers, and activities. These endpoints are exposed through GET routes and directly create or reuse a Team, add the current user as teamlead, and bind the target...

Moddable SDK OS Code Issue Vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in versions of Moddable SDK prior to OS200908, which results in a denial of service SEGV due to xObjectBindingFromExpression at...