Lucene search
K

15 matches found

OSV
OSV
added 2026/04/16 9:22 p.m.1 views

GHSA-M7MQ-85XJ-9X33 Flowise: Weak Default Token Hash Secret

Detection Method: Kolega.dev Deep Code Scan | Attribute | Value | |---|---| | Location | packages/server/src/enterprise/utils/tempTokenUtils.ts:31-34 | | Practical Exploitability | Medium | | Developer Approver | [email protected] | Description The encryption key for token encryption has a weak...

5.6CVSS5.9AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/12 4:0 p.m.2 views

CVE-2025-67740

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

5.3CVSS6.9AI score0.00001EPSS
Exploits0References1
OSV
OSV
added 2025/12/11 4:16 p.m.0 views

CVE-2025-67740

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

5.3CVSS5.8AI score0.00001EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/11 3:19 p.m.2 views

EUVD-2025-202696

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

2.7CVSS6.4AI score0.00001EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/11 3:19 p.m.26 views

CVE-2025-67740

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

2.7CVSS0.00001EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.1 views

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

5.3CVSS6.6AI score0.00001EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.4 views

PT-2025-50626

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

2.7CVSS6.9AI score0.00001EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-3866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs ...

5CVSS5.1AI score0.0024EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/31 3:1 a.m.1 views

Malicious code in mpl-token-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e20c7d93bbedc5a446405747356b754aec260f1716a86efbef222f15a52385e Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References1
OSV
OSV
added 2025/01/31 3:1 a.m.1 views

MAL-2025-710 Malicious code in mpl-token-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e20c7d93bbedc5a446405747356b754aec260f1716a86efbef222f15a52385e Any computer that has this package installed or running should be considered...

7AI score
Exploits0References1
Code423n4
Code423n4
added 2023/07/10 12:0 a.m.12 views

Potential token duplication validation bypass

Lines of code Vulnerability details Impact Potential token duplication validation bypass Proof of Concept The loop statement in init function will check if there is duplicated token for a Well. function initstring memory name, string memory symbol public initializer ERC20Permitinitname;...

6.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2022/12/12 10:2 p.m.24 views

Creator Verification Error when Bubblegum Activate

This was an error found by @metamania01 of the Audit Company Solshield. It allowed one to verify a creator that did not sign by making use of a provision in Token Metadata that allows Creators who have signed compressed nfts to allow them to decompress with verified creators. The issue is now...

3AI score
Exploits0References4Affected Software2
OSV
OSV
added 2022/12/12 10:2 p.m.10 views

GHSA-8R76-FR72-J32W Creator Verification Error when Bubblegum Activate

This was an error found by @metamania01 of the Audit Company Solshield. It allowed one to verify a creator that did not sign by making use of a provision in Token Metadata that allows Creators who have signed compressed nfts to allow them to decompress with verified creators. The issue is now...

6.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/12/12 12:0 a.m.1 views

PT-2022-28223 · Crates.Io · Mpl-Bubblegum +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allowed verification of a creator that did not sign by utilizing a provision in Token Metadata. This provision enables creators who have signed compressed NFTs to decompress...

6.8AI score
Exploits0References5
vulnersOsv
vulnersOsv
added 2022/05/22 12:0 a.m.2 views

gemachain-bpf-loader-program (=1.8.0), hpl-reward-center (>=0.1.0 <=0.2.4) +57 more potentially affected by CVE-2022-31264 via solana_rbpf (>=0.1.10 <=0.2.24)

solanarbpf CARGO version =0.1.10, =0.1.0, =1.1.6, =0.2.1, =0.1.0, =0.1.0, =1.2.3, =0.1.1, =0.1.7 and more Source cves: CVE-2022-31264 Source advisory: OSV:GHSA-FFX3-8QVM-PQ3J...

7.5CVSS7.1AI score0.00334EPSS
Exploits1
Rows per page
Query Builder