43 matches found
CVE-2026-63087
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087
Grafana OnCall 1.16.11 is affected by an unauthenticated token-hijack vulnerability via the internal plugin install endpoint. An attacker can POST to the endpoint using hardcoded default stack_id and org_id values to obtain a valid PluginAuthToken, which can be used to authenticate against intern...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
CVE-2026-63087 Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
EUVD-2026-44955
Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...
PT-2026-60508
Name of the Vulnerable Software and Affected Versions Grafana OnCall versions prior to 1.16.12 Description An unauthenticated access issue exists where remote attackers can obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint. This is possible by using...
EUVD-2024-46730
Malicious code in bioql PyPI...
CVE-2025-44206
Hexagon HxGN OnCall Dispatch Advantage Web v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage Mobile v10.2402 are vulnerable to Cross Site Scripting XSS which allows a remote authenticated attacker with access to the Broadcast Person functionality to execute arbitrary code...
CVE-2025-44206
Hexagon HxGN OnCall Dispatch Advantage Web v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage Mobile v10.2402 are vulnerable to Cross Site Scripting XSS which allows a remote authenticated attacker with access to the Broadcast Person functionality to execute arbitrary code...
PT-2025-26848 · Hexagon · Hexagon Hxgn Oncall Dispatch Advantage
Name of the Vulnerable Software and Affected Versions: Hexagon HxGN OnCall Dispatch Advantage Web version 10.2309.03.00264 Hexagon HxGN OnCall Dispatch Advantage Mobile version 10.2402 Description: The issue allows a remote authenticated attacker with access to the Broadcast Person functionality ...
Hexagon HxGN OnCall Dispatch Advantage 跨站脚本漏洞
Hexagon HxGN OnCall Dispatch Advantage is a software suite for event management and dispatch from Hexagon Sweden. A security vulnerability exists in Hexagon HxGN OnCall Dispatch Advantage that stems from a cross-site scripting vulnerability that could lead to the execution of arbitrary code...
CVE-2025-44206
Hexagon HxGN OnCall Dispatch Advantage Web v10.2309.03.00264 and Mobile v10.2402 are affected by a Cross-Site Scripting (XSS) vulnerability that can be exploited by a remote authenticated attacker with access to the Broadcast (Person) functionality to execute arbitrary code. Root cause details be...
CVE-2025-44206
Hexagon HxGN OnCall Dispatch Advantage Web v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage Mobile v10.2402 are vulnerable to Cross Site Scripting XSS which allows a remote authenticated attacker with access to the Broadcast Person functionality to execute arbitrary code...
CVE-2025-44206
Hexagon HxGN OnCall Dispatch Advantage Web v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage Mobile v10.2402 are vulnerable to Cross Site Scripting XSS which allows a remote authenticated attacker with access to the Broadcast Person functionality to execute arbitrary code...
CVE-2025-4565 vulnerabilities
Vulnerabilities for packages: kserve...
GHSA-8QVM-5X2C-J2W7 vulnerabilities
Vulnerabilities for packages: kserve...
GHSA-8QVM-5X2C-J2W7 vulnerabilities
Vulnerabilities for packages: awx, kserve, text-generation-inference, request-1276, spamcheck, ghidra, nemo...