111 matches found
Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS
Multiple cross-site scripting XSS vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 redirect parameter to member.php, 2 to parameter to myhome.php 3 TID parameter to post.php, or 4 redirect parameter to...
autonomy (0.1.1), iflow-mcp-masihmoafi-a-modular-kingdom (>=0.1.0, <=0.1.1) +4 more potentially affected by CVE-2026-116575 via mem0ai (>=2.0.5, <=2.0.14)
mem0ai PYPI version =2.0.5, =0.1.0, =0.1.0, =0.2.0, =0.27.1, =0.30.1 Source cves: CVE-2026-116575 Source advisory: MEND:CVE-2026-116575...
CVE-2026-116108
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbbplatform/core/openbbcore/app/model/apisettings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The...
CVE-2026-116108 openbq-org OpenBB Local API Server api_settings.py access control
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbbplatform/core/openbbcore/app/model/apisettings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The...
CVE-2026-116108 openbq-org OpenBB Local API Server api_settings.py access control
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbbplatform/core/openbbcore/app/model/apisettings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The...
CVE-2026-116108
A flaw in openbq-org OpenBB (versions up to 4.7.2/5.0.0 ) affects the Local API Server component. The vulnerability exists within the file openbb_platform/core/openbb_core/app/model/api_settings.py, where a flaw leads to improper access controls . This issue allows for remote exploitation , and t...
EUVD-2026-109600
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbbplatform/core/openbbcore/app/model/apisettings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The...
CVE-2026-116108
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbbplatform/core/openbbcore/app/model/apisettings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The...
OpenBB permission and access control issue vulnerability
OpenBB versions 4.7.2 and earlier, as well as 5.0.0 and earlier, contain a permission and access control vulnerability. This vulnerability stems from improper access control in the file openbbplatform/core/openbbcore/app/model/apisettings.py within the Local API Server component, potentially...
PT-2026-123154
A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb platform/core/openbb core/app/model/api settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Th...
OpenBB 1.0.x Private Message Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10217/info It has been reported that OpenBB is affected by a private message disclosure vulnerability. This issue is due to a design error that fails to validate user credentials. This issue might allow an attacker to rea...
OpenBB 1.0/1.1 Index.PHP Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7401/info It has been reported that OpenBB does not properly check input passed via the 'index.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...
OpenBB 1.0 .0 RC3 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4824/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. It has been reported that OpenBB is vulnerable to a cross-site...
OpenBB 1.0.8 Read.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...
OpenBB 1.0.8 Member.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
OpenBB 1.0.x myhome.php to Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may...
OpenBB 1.0.x post.php TID Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may...
OpenBB 1.0.6 MyHome.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10044/info It has been reported that OpenBB is prone to a vulnerability that may allow malicious users to influence SQL queries of the affected application. This issue is due to a failure of the application to properly...
OpenBB 1.0.x search.php q Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may...
OpenBB 1.0 Unauthorized Moderator Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4823/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. OpenBB is reported to be vulnerable to a condition that will allow an...