PT-2026-121512

Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB SELF HOST endpoint. Attackers can set instanceUrl...

PT-2026-65605

Name of the Vulnerable Software and Affected Versions Cosmos versions prior to 0.22.19 Description Cosmos discloses Constellation device metadata to any requester who provides a non-empty Authorization header. The system fails to validate the token provided in the header, stripping the Bearer...

EUVD-2023-32623

Malicious code in bioql PyPI...

RustDesk Self-Host Server Installed (Windows)

Binary data rustdeskselfhostingserverwininstalled.nbin...

RustDesk Self-Host Server (Linux)

Binary data rustdeskselfhostingserverlinuxinstalled.nbin...

Budibase affected by VM2 Constructor Escape Vulnerability

Impact Previously, budibase used a library called vm2 for code execution inside the Budibase builder and apps, such as the UI below for configuring bindings in the design section. Due to a vulnerability in vm2, any environment that executed the code server side automations and column formulas was...

CVE-2023-29010: Server-Side Request Forgery (SSRF)

Budibase is a low code platform for creating internal tools, workflows, and admin panels. Versions prior to 2.4.3 07 March 2023 are vulnerable to Server-Side Request Forgery. This can lead to an attacker gaining access to a Budibase AWS secret key. Users of Budibase cloud need to take no action...