GrafanaSCIMalform

Grafana SCIMalform CVE-2025-41115 Panoramica Questo repository contiene la mia ricerca sulla vulnerabilità CVE-2025-41115 nel componente SCIM di Grafana Enterprise. Consiste in un ambiente di test con l'applicazione vulnerabile e il codice di exploit. Riferimenti Solo alcuni riferimenti utili: NI...

AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data

Summary The Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypass that allows an attacker to forge webhook requests with arbitrary payment amounts and target user IDs. By supplying a valid transaction ID from a small legitimate purchase, the...

EUVD-2026-30630

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the POST /api/v1/evaluations/feedback endpoint in Open WebUI v0.9.2 is vulnerable to mass assignment via FeedbackForm, which uses modelconfig = ConfigDictextra='allow'. Due to an...