13 matches found
CVE-2026-93983: Improper Neutralization of Special Elements used in an SQL Command
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users to inject boolean SQL terms. Attackers can supply crafted filter names to bypass project isolation and access metrics from other projects...
PT-2026-95820
Name of the Vulnerable Software and Affected Versions OpenPanel versions prior to commit bad75bdd Description Authenticated users can inject boolean SQL terms because the software fails to escape property keys in ClickHouse SQL queries. By supplying crafted filter names, attackers can bypass...
CVE-2026-62313
Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...
EUVD-2025-29703
Malicious code in bioql PyPI...
CVE-2025-59455
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...
JetBrains TeamCity Competitive Conditions Vulnerability
JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a competitive condition vulnerability that...
JetBrains TeamCity < 2025.07.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2025.07.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition CVE-2025-59455 - In JetBrains TeamCity before 2025.07....
CVE-2025-59455
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...
CVE-2025-59455
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...
CVE-2025-59455
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...
CVE-2025-59455
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...
PT-2025-38133
Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07.2 Description: A race condition allowed for a project isolation bypass in TeamCity. Recommendations: Update to TeamCity version 2025.07.2 or later...
CVE-2025-59455: Concurrent Execution using Shared Resource with Improper Synchronization
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...